The Samba-Bugzilla – Attachment 7187 Details for
Bug 8414
Cannot delete/rename files on samba 3.6.0 shares
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
smbd_361orig_rename.log
smbd_361orig_rename.log (text/x-log), 2.15 MB, created by
Dmitry
on 2011-12-15 07:54:09 UTC
(
hide
)
Description:
smbd_361orig_rename.log
Filename:
MIME Type:
Creator:
Dmitry
Created:
2011-12-15 07:54:09 UTC
Size:
2.15 MB
patch
obsolete
>[2011/12/15 11:33:40.381079, 3] param/loadparm.c:9579(lp_load_ex) > lp_load_ex: refreshing parameters >[2011/12/15 11:33:40.381226, 3] param/loadparm.c:5196(init_globals) > Initialising global parameters >[2011/12/15 11:33:40.381314, 2] param/loadparm.c:4989(max_open_files) > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) >[2011/12/15 11:33:40.381507, 3] ../lib/util/params.c:550(pm_process) > params.c:pm_process() - Processing configuration file "/opt/samba/smb.conf" >[2011/12/15 11:33:40.381596, 3] param/loadparm.c:8317(do_section) > Processing section "[global]" > doing parameter pid directory = /opt/samba/run > doing parameter lock directory = /opt/samba/cache > doing parameter private dir = /opt/samba/cache > doing parameter log file = /opt/samba/smbd.log > doing parameter log level = 10 >[2011/12/15 11:33:40.381924, 5] ../lib/util/debug.c:330(debug_dump_status) > INFO: Current debug levels: > all: 10 > tdb: 10 > printdrivers: 10 > lanman: 10 > smb: 10 > rpc_parse: 10 > rpc_srv: 10 > rpc_cli: 10 > passdb: 10 > sam: 10 > auth: 10 > winbind: 10 > vfs: 10 > idmap: 10 > quota: 10 > acls: 10 > locking: 10 > msdfs: 10 > dmapi: 10 > registry: 10 > doing parameter workgroup = TEST > doing parameter security = share > doing parameter show add printer wizard = no > doing parameter max log size = 10240 > doing parameter bind interfaces only = true > doing parameter interfaces = eth1 >[2011/12/15 11:33:40.382852, 2] param/loadparm.c:8334(do_section) > Processing section "[homes]" >[2011/12/15 11:33:40.383007, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 0 for homes >[2011/12/15 11:33:40.383082, 10] param/loadparm.c:6525(hash_a_service) > hash_a_service: creating servicehash >[2011/12/15 11:33:40.383153, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 0 for service name homes > doing parameter browseable = no > doing parameter printable = no >[2011/12/15 11:33:40.383374, 2] param/loadparm.c:8334(do_section) > Processing section "[public]" >[2011/12/15 11:33:40.383496, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 1 for public >[2011/12/15 11:33:40.383570, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 1 for service name public > doing parameter path = /mnt/public > doing parameter comment = "" > doing parameter read only = no > doing parameter guest ok = yes > doing parameter follow symlinks = no > doing parameter writable = yes >[2011/12/15 11:33:40.383911, 4] param/loadparm.c:9615(lp_load_ex) > pm_process() returned Yes >[2011/12/15 11:33:40.384070, 8] param/loadparm.c:6487(add_a_service) > add_a_service: Creating snum = 2 for IPC$ >[2011/12/15 11:33:40.384145, 10] param/loadparm.c:6534(hash_a_service) > hash_a_service: hashing index 2 for service name IPC$ >[2011/12/15 11:33:40.384238, 3] param/loadparm.c:6637(lp_add_ipc) > adding IPC service >[2011/12/15 11:33:40.384310, 10] param/loadparm_server_role.c:101(set_server_role) > set_server_role: role = ROLE_STANDALONE >[2011/12/15 11:33:40.384381, 1] param/loadparm.c:9673(lp_load_ex) > WARNING: The security=share option is deprecated >[2011/12/15 11:33:40.384468, 5] ../lib/util/charset/codepoints.c:235(map_locale) > Substituting charset 'UTF-8' for LOCALE >[2011/12/15 11:33:40.384575, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:40.384946, 2] lib/interface.c:341(add_interface) > added interface eth1 ip=194.87.37.17 bcast=194.87.37.19 netmask=255.255.255.252 >[2011/12/15 11:33:40.385081, 3] smbd/server.c:1083(main) > loaded services >[2011/12/15 11:33:40.385166, 5] lib/util.c:242(init_names) > Netbios name list:- > my_netbios_names[0]="ROCK" >[2011/12/15 11:33:40.385369, 0] smbd/server.c:1104(main) > standard input is not a socket, assuming -D option >[2011/12/15 11:33:40.385615, 8] ../lib/util/util.c:263(fcntl_lock) > fcntl_lock 10 13 0 1 1 >[2011/12/15 11:33:40.385723, 8] ../lib/util/util.c:298(fcntl_lock) > fcntl_lock: Lock call successful >[2011/12/15 11:33:40.386123, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend smbpasswd >[2011/12/15 11:33:40.386228, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'smbpasswd' >[2011/12/15 11:33:40.386304, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend tdbsam >[2011/12/15 11:33:40.386377, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'tdbsam' >[2011/12/15 11:33:40.386453, 5] passdb/pdb_interface.c:71(smb_register_passdb) > Attempting to register passdb backend wbc_sam >[2011/12/15 11:33:40.386532, 5] passdb/pdb_interface.c:84(smb_register_passdb) > Successfully added passdb backend 'wbc_sam' >[2011/12/15 11:33:40.386604, 5] passdb/pdb_interface.c:141(make_pdb_method_name) > Attempting to find a passdb backend to match tdbsam (tdbsam) >[2011/12/15 11:33:40.386680, 5] passdb/pdb_interface.c:162(make_pdb_method_name) > Found pdb backend tdbsam >[2011/12/15 11:33:40.386771, 5] passdb/pdb_interface.c:173(make_pdb_method_name) > pdb backend tdbsam has a valid init >[2011/12/15 11:33:40.388566, 10] registry/reg_backend_db.c:526(regdb_init) > regdb_init: registry db openend. refcount reset (1) >[2011/12/15 11:33:40.388708, 10] registry/reg_cachehook.c:70(reghook_cache_init) > reghook_cache_init: new tree with default ops 0x9b1440 for key [] >[2011/12/15 11:33:40.389228, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2011/12/15 11:33:40.389391, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Samba Printer Port], len: 2 >[2011/12/15 11:33:40.389493, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2011/12/15 11:33:40.389611, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DefaultSpoolDirectory], len: 70 >[2011/12/15 11:33:40.389696, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.389806, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:33:40.389885, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.389969, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.390079, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:33:40.390158, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.390245, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1520 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] >[2011/12/15 11:33:40.390320, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.390400, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree >[2011/12/15 11:33:40.390478, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.390555, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1440 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2011/12/15 11:33:40.390630, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.390711, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree >[2011/12/15 11:33:40.390786, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.390861, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1440 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2011/12/15 11:33:40.390966, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.391045, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree >[2011/12/15 11:33:40.391120, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.391195, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1560 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2011/12/15 11:33:40.391270, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.391347, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree >[2011/12/15 11:33:40.391421, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.391495, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b14e0 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2011/12/15 11:33:40.391570, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.391646, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree >[2011/12/15 11:33:40.391718, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.391793, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b15a0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2011/12/15 11:33:40.391868, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.391945, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree >[2011/12/15 11:33:40.392020, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.392094, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b15e0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2011/12/15 11:33:40.392169, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.392245, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree >[2011/12/15 11:33:40.392319, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.392393, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1620 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] >[2011/12/15 11:33:40.392474, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.392541, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree >[2011/12/15 11:33:40.392604, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.392666, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b1660 for key [\HKPT] >[2011/12/15 11:33:40.392727, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.392790, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKPT] to tree >[2011/12/15 11:33:40.392851, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.392914, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b16a0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] >[2011/12/15 11:33:40.392976, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.393037, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree >[2011/12/15 11:33:40.393098, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.393185, 10] registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x9b16e0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2011/12/15 11:33:40.393249, 8] lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2011/12/15 11:33:40.393312, 10] lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree >[2011/12/15 11:33:40.393374, 8] lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2011/12/15 11:33:40.393434, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (1->0) >[2011/12/15 11:33:40.394231, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:33:40.394305, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:33:40.394410, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:33:40.394504, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\root => domain=[Unix User], name=[root] >[2011/12/15 11:33:40.394567, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:40.394682, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:33:40.394746, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:33:40.394812, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:33:40.394891, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username root, was >[2011/12/15 11:33:40.394960, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name root, was >[2011/12/15 11:33:40.395023, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:33:40.395091, 4] lib/substitute.c:522(automount_server) > Home server: rock >[2011/12/15 11:33:40.395164, 10] passdb/pdb_get_set.c:660(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\rock\root\profile, was >[2011/12/15 11:33:40.395229, 4] lib/substitute.c:522(automount_server) > Home server: rock >[2011/12/15 11:33:40.395297, 10] passdb/pdb_get_set.c:707(pdb_set_homedir) > pdb_set_homedir: setting home dir \\rock\root, was >[2011/12/15 11:33:40.395362, 10] passdb/pdb_get_set.c:683(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2011/12/15 11:33:40.395431, 10] passdb/pdb_get_set.c:637(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2011/12/15 11:33:40.395498, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-1000 >[2011/12/15 11:33:40.395570, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-1000 from rid 1000 >[2011/12/15 11:33:40.395658, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username root, was root >[2011/12/15 11:33:40.395719, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-22-1-0 >[2011/12/15 11:33:40.395808, 5] lib/gencache.c:68(gencache_init) > Opening cache file at /opt/samba/cache/gencache.tdb >[2011/12/15 11:33:40.395941, 5] lib/gencache.c:111(gencache_init) > Opening cache file at /opt/samba/cache/gencache_notrans.tdb >[2011/12/15 11:33:40.396119, 5] passdb/lookup_sid.c:1384(gid_to_sid) > gid_to_sid: winbind failed to find a sid for gid 0 >[2011/12/15 11:33:40.396190, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.396257, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.396322, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.396385, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.396450, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.396671, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.396737, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) > LEGACY: gid 0 -> sid S-1-22-2-0 >[2011/12/15 11:33:40.396816, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for root >[2011/12/15 11:33:40.396884, 10] auth/server_info.c:354(samu_to_SamInfo3) > Unix User found in struct samu. Rid marked as special and sid (S-1-22-1-0) saved as extra sid >[2011/12/15 11:33:40.396958, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:33:40.397019, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:33:40.397080, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:33:40.397170, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [root] >[2011/12/15 11:33:40.397376, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: ROCK\root => domain=[ROCK], name=[root] >[2011/12/15 11:33:40.397441, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:40.397516, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.397578, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.397638, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.397698, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.397757, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.397905, 4] passdb/pdb_tdb.c:523(tdbsam_open) > tdbsam_open: successfully opened /opt/samba/cache/passdb.tdb >[2011/12/15 11:33:40.397975, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_root >[2011/12/15 11:33:40.398068, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.398132, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.398195, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.398255, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.398315, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.398374, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.398492, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.398561, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\root => domain=[Unix User], name=[root] >[2011/12/15 11:33:40.398622, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:40.398692, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user root >[2011/12/15 11:33:40.398752, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is root >[2011/12/15 11:33:40.398814, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [root]! >[2011/12/15 11:33:40.398884, 10] passdb/lookup_sid.c:1527(sid_to_uid) > sid S-1-22-1-0 -> uid 0 >[2011/12/15 11:33:40.398990, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [root] >[2011/12/15 11:33:40.399113, 10] auth/token_util.c:339(create_local_nt_token) > Create local NT token for S-1-22-1-0 >[2011/12/15 11:33:40.399216, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:33:40.399283, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.399364, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.399425, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.399485, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.399545, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.399658, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.399721, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:33:40.399784, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.399846, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.399906, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.399966, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.400025, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.400128, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:40.400198, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.400284, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:33:40.400349, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.400411, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.400471, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.400531, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.400590, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.400702, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.400764, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:33:40.400827, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.400889, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.400949, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.401009, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.401068, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.401168, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:40.401237, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.401299, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.401361, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.401420, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.401494, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.401554, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.401717, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.401872, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-0] >[2011/12/15 11:33:40.401946, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-0] >[2011/12/15 11:33:40.402019, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:33:40.402111, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:33:40.402181, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-11] >[2011/12/15 11:33:40.402342, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:33:40.402412, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.402481, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.402542, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.402602, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.402662, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.402774, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.402837, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:40.402899, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:40.402963, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.403025, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.403085, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.403144, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.403203, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.403313, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.403376, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:40.403438, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:40.403501, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.403563, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.403623, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.403684, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.403743, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.403853, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.403916, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-11 >[2011/12/15 11:33:40.403977, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-11 >[2011/12/15 11:33:40.404041, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:33:40.404103, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:33:40.404165, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-11 to gid, ignoring it >[2011/12/15 11:33:40.404230, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-0 > SID[ 1]: S-1-22-2-0 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-11 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:40.404486, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 1 supplementary groups > Group[ 0]: 0 >[2011/12/15 11:33:40.404605, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.404666, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.404770, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.404856, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user ROCK\nobody >[2011/12/15 11:33:40.404917, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is rock\nobody >[2011/12/15 11:33:40.405028, 5] lib/username.c:124(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as given is ROCK\nobody >[2011/12/15 11:33:40.405140, 5] lib/username.c:134(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is ROCK\NOBODY >[2011/12/15 11:33:40.405250, 5] lib/username.c:143(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in rock\nobody >[2011/12/15 11:33:40.405312, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [ROCK\nobody]! >[2011/12/15 11:33:40.405373, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.405432, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.405504, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.405594, 5] passdb/lookup_sid.c:1384(gid_to_sid) > gid_to_sid: winbind failed to find a sid for gid 65534 >[2011/12/15 11:33:40.405657, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.405718, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.405778, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.405838, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.405897, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.406007, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.406070, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid) > LEGACY: gid 65534 -> sid S-1-22-2-65534 >[2011/12/15 11:33:40.406145, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for nobody >[2011/12/15 11:33:40.406208, 10] auth/token_util.c:223(create_local_nt_token_from_info3) > Create local NT token for nobody >[2011/12/15 11:33:40.406295, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:33:40.406359, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.406421, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.406486, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.406547, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.406605, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.406716, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.406779, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:33:40.406841, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.406921, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.406982, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.407041, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.407101, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.407201, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:40.407269, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.407356, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:33:40.407419, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.407481, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.407541, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.407601, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.407659, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.407770, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.407832, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:33:40.407895, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.407957, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.408016, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.408076, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.408135, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.408235, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:40.408304, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.408366, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.408427, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.408487, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.408546, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.408605, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.408785, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.408858, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-501] >[2011/12/15 11:33:40.408933, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-513] >[2011/12/15 11:33:40.409007, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-251563815-16092371-1107951384-546] >[2011/12/15 11:33:40.409080, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:33:40.409172, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:33:40.409259, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2011/12/15 11:33:40.409527, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:33:40.409591, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.409654, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.409714, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.409774, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.409833, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.409929, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 501. >[2011/12/15 11:33:40.409992, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.410053, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.410113, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.410172, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.410231, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.410323, 6] passdb/pdb_interface.c:399(pdb_getsampwsid) > pdb_getsampwsid: Building guest account >[2011/12/15 11:33:40.410383, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.410443, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.410511, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.410573, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:33:40.410635, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:33:40.410698, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:33:40.410762, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:33:40.410826, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:33:40.410921, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.410986, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.411047, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.411108, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.411177, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.411239, 5] passdb/lookup_sid.c:1269(legacy_sid_to_gid) > LEGACY: sid S-1-5-21-251563815-16092371-1107951384-501 is a User, expected a group >[2011/12/15 11:33:40.411305, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.411368, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.411427, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.411487, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.411546, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.411653, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 501. >[2011/12/15 11:33:40.411717, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.411778, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.411838, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.411897, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.411956, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.412047, 6] passdb/pdb_interface.c:399(pdb_getsampwsid) > pdb_getsampwsid: Building guest account >[2011/12/15 11:33:40.412107, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.412167, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.412228, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.412288, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:33:40.412349, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:33:40.412409, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:33:40.412472, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:33:40.412536, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:33:40.412630, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.412695, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:40.412755, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:40.412817, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:40.412885, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.412947, 10] passdb/lookup_sid.c:1223(legacy_sid_to_uid) > LEGACY: sid S-1-5-21-251563815-16092371-1107951384-501 -> uid 65534 >[2011/12/15 11:33:40.413015, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.413078, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.413138, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.413197, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.413256, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.413348, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2011/12/15 11:33:40.413411, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.413481, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.413541, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.413600, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.413659, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.413762, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2011/12/15 11:33:40.413865, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.413929, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:33:40.413997, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.414059, 10] passdb/lookup_sid.c:1280(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-513 >[2011/12/15 11:33:40.414124, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.414186, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.414246, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.414305, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.414365, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.414461, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2011/12/15 11:33:40.414525, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.414587, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.414646, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.414706, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.414765, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.414866, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2011/12/15 11:33:40.414951, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.415013, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:33:40.415081, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.415143, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-513 >[2011/12/15 11:33:40.415208, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.415270, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.415330, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.415389, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.415448, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.415540, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 546. >[2011/12/15 11:33:40.415603, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.415664, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.415724, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.415784, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.415843, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.415942, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 546 by key RID_00000222. >[2011/12/15 11:33:40.416026, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.416117, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:33:40.416189, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.416250, 10] passdb/lookup_sid.c:1280(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-546 >[2011/12/15 11:33:40.416316, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.416377, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.416437, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.416497, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.416556, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.416648, 5] passdb/pdb_interface.c:1604(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 546. >[2011/12/15 11:33:40.416711, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.416772, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.416832, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2011/12/15 11:33:40.416892, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.416951, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.417051, 5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 546 by key RID_00000222. >[2011/12/15 11:33:40.417135, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.417198, 5] passdb/pdb_interface.c:1666(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2011/12/15 11:33:40.417265, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.417327, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-21-251563815-16092371-1107951384-546 >[2011/12/15 11:33:40.417392, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.417461, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.417522, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.417582, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.417641, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.417750, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.417813, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:40.417874, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:40.417937, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.417999, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.418059, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.418118, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.418177, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.418286, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.418366, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:40.418438, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:40.418510, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.418573, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.418632, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.418692, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.418751, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.418861, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.418924, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:40.418987, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:40.419049, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-21-251563815-16092371-1107951384-513 to gid, ignoring it >[2011/12/15 11:33:40.419113, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-21-251563815-16092371-1107951384-546 to gid, ignoring it >[2011/12/15 11:33:40.419176, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:33:40.419238, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:33:40.419299, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2011/12/15 11:33:40.419369, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-251563815-16092371-1107951384-501 > SID[ 1]: S-1-5-21-251563815-16092371-1107951384-513 > SID[ 2]: S-1-5-21-251563815-16092371-1107951384-546 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-32-546 > SID[ 6]: S-1-22-1-65534 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:40.419664, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 0 supplementary groups >[2011/12/15 11:33:40.419881, 3] rpc_server/svcctl/srv_svcctl_reg.c:569(svcctl_init_winreg) > Initialise the svcctl registry keys if needed. >[2011/12/15 11:33:40.419949, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.420011, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.420071, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:40.420131, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:40.420190, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:40.420336, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:40.420400, 10] registry/reg_backend_db.c:602(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2011/12/15 11:33:40.420482, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \winreg >[2011/12/15 11:33:40.420579, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \winreg >[2011/12/15 11:33:40.420646, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg >[2011/12/15 11:33:40.420715, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \winreg (pipes_open=0) >[2011/12/15 11:33:40.420821, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:40.421221, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2011/12/15 11:33:40.421287, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (1->2) >[2011/12/15 11:33:40.421352, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2011/12/15 11:33:40.421414, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2011/12/15 11:33:40.421487, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.421547, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM] >[2011/12/15 11:33:40.421641, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.421775, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > result : WERR_OK >[2011/12/15 11:33:40.422127, 5] ../lib/util/charset/codepoints.c:235(map_locale) > Substituting charset 'UTF-8' for LOCALE >[2011/12/15 11:33:40.422203, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > keyname: struct winreg_String > name_len : 0x0044 (68) > name_size : 0x0044 (68) > name : * > name : 'SYSTEM\CurrentControlSet\Services' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:40.422937, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.423071, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.423134, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:33:40.423199, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.423279, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.423341, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.423400, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.423492, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.423557, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.423622, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.423683, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.423745, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.423805, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.423889, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.423954, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.424016, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.424081, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.424142, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.424204, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.424263, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.424361, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.424428, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.424555, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > result : WERR_OK >[2011/12/15 11:33:40.424825, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2011/12/15 11:33:40.425170, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.425340, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x9b1440) >[2011/12/15 11:33:40.425422, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.425511, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.425599, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000007 (7) > max_subkeylen : * > max_subkeylen : 0x0000001c (28) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000000 (0) > max_valnamelen : * > max_valnamelen : 0x00000002 (2) > max_valbufsize : * > max_valbufsize : 0x00000000 (0) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.426322, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000000 (0) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.426941, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.427068, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.427168, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001a (26) > size : 0x001e (30) > name : * > name : 'LanmanServer' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.427721, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000001 (1) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.428328, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.428455, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.428552, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Eventlog' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.429082, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000002 (2) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.429697, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.429842, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.429947, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000c (12) > size : 0x001e (30) > name : * > name : 'Tcpip' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.430482, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000003 (3) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.431090, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.431218, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.431315, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Netlogon' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.431843, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000004 (4) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.432465, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.432591, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.432697, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0010 (16) > size : 0x001e (30) > name : * > name : 'Spooler' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.433228, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000005 (5) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.433843, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.433971, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.434068, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001e (30) > size : 0x001e (30) > name : * > name : 'RemoteRegistry' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.434628, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 > enum_index : 0x00000006 (6) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2011/12/15 11:33:40.435235, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.435363, 8] rpc_server/winreg/srv_winreg_nt.c:420(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.435460, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000a (10) > size : 0x001e (30) > name : * > name : 'WINS' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.436011, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0054 (84) > name_size : 0x0054 (84) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:33:40.436955, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.437079, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' >[2011/12/15 11:33:40.437145, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.437207, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.437272, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.437333, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.437395, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.437466, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.437550, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.437615, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.437680, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.437741, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.437803, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.437862, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.437946, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.438011, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.438072, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.438138, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.438198, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.438260, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.438320, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.438421, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.438508, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2011/12/15 11:33:40.438572, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.438638, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.438699, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.438761, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.438821, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.438904, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.438969, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.439092, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.439413, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.439977, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.440102, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] >[2011/12/15 11:33:40.440165, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x9b1440) >[2011/12/15 11:33:40.440228, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.440310, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:33:40.440375, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:33:40.440439, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.440503, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:33:40.440586, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 28 >[2011/12/15 11:33:40.440651, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:33:40.440714, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 106 >[2011/12/15 11:33:40.440778, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.440931, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.441535, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.441659, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] >[2011/12/15 11:33:40.441724, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.441867, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.442420, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.442548, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] >[2011/12/15 11:33:40.442614, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.442790, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:33:40.443896, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.444020, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] >[2011/12/15 11:33:40.444084, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.444239, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(28) > [0] : 0x50 (80) > [1] : 0x00 (0) > [2] : 0x72 (114) > [3] : 0x00 (0) > [4] : 0x69 (105) > [5] : 0x00 (0) > [6] : 0x6e (110) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x20 (32) > [11] : 0x00 (0) > [12] : 0x53 (83) > [13] : 0x00 (0) > [14] : 0x70 (112) > [15] : 0x00 (0) > [16] : 0x6f (111) > [17] : 0x00 (0) > [18] : 0x6f (111) > [19] : 0x00 (0) > [20] : 0x6c (108) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > size : 0x0000001c (28) >[2011/12/15 11:33:40.445508, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.445633, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] >[2011/12/15 11:33:40.445698, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.445843, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:33:40.448346, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.448471, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] >[2011/12/15 11:33:40.448536, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.448681, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(106) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x66 (102) > [35] : 0x00 (0) > [36] : 0x6f (111) > [37] : 0x00 (0) > [38] : 0x72 (114) > [39] : 0x00 (0) > [40] : 0x20 (32) > [41] : 0x00 (0) > [42] : 0x73 (115) > [43] : 0x00 (0) > [44] : 0x70 (112) > [45] : 0x00 (0) > [46] : 0x6f (111) > [47] : 0x00 (0) > [48] : 0x6f (111) > [49] : 0x00 (0) > [50] : 0x6c (108) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x6e (110) > [55] : 0x00 (0) > [56] : 0x67 (103) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x66 (102) > [61] : 0x00 (0) > [62] : 0x69 (105) > [63] : 0x00 (0) > [64] : 0x6c (108) > [65] : 0x00 (0) > [66] : 0x65 (101) > [67] : 0x00 (0) > [68] : 0x73 (115) > [69] : 0x00 (0) > [70] : 0x20 (32) > [71] : 0x00 (0) > [72] : 0x74 (116) > [73] : 0x00 (0) > [74] : 0x6f (111) > [75] : 0x00 (0) > [76] : 0x20 (32) > [77] : 0x00 (0) > [78] : 0x70 (112) > [79] : 0x00 (0) > [80] : 0x72 (114) > [81] : 0x00 (0) > [82] : 0x69 (105) > [83] : 0x00 (0) > [84] : 0x6e (110) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x64 (100) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x76 (118) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x63 (99) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x73 (115) > [103] : 0x00 (0) > [104] : 0x00 (0) > [105] : 0x00 (0) > size : 0x0000006a (106) >[2011/12/15 11:33:40.452266, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.452393, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] >[2011/12/15 11:33:40.452458, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.452613, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.452822, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.452947, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.453084, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.453148, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.453211, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.453485, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0066 (102) > name_size : 0x0066 (102) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:33:40.454413, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.454543, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' >[2011/12/15 11:33:40.454608, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.454671, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.454736, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.454798, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.454859, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.454919, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.455002, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.455066, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.455131, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.455209, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.455272, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.455332, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.455417, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.455482, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.455544, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.455609, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.455670, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.455732, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.455791, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.455891, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.455957, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2011/12/15 11:33:40.456019, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.456084, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.456145, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.456208, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.456268, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2011/12/15 11:33:40.456349, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.456413, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:33:40.456475, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.456541, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:33:40.456603, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:33:40.456665, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.456725, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:33:40.456802, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:33:40.456867, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.456931, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.457054, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.457405, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:33:40.461271, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.461413, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] >[2011/12/15 11:33:40.461489, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x9b1440) >[2011/12/15 11:33:40.461553, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2011/12/15 11:33:40.461636, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:33:40.461700, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.461840, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.462060, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.462184, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.462306, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.462367, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.462430, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.462700, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:33:40.463655, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.463783, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' >[2011/12/15 11:33:40.463847, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.463909, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.463974, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.464035, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.464097, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.464156, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.464239, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.464303, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.464368, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.464429, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.464490, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.464563, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.464678, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.464757, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.464829, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.464907, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.464979, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.465055, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.465125, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.465261, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.465339, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2011/12/15 11:33:40.465414, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.465518, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.465592, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.465669, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.465771, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.465889, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.465971, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.466144, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.466572, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.467274, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.467456, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] >[2011/12/15 11:33:40.467536, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x9b1440) >[2011/12/15 11:33:40.467613, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.467726, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:33:40.467806, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:33:40.467881, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.467957, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:33:40.468034, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:33:40.468109, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:33:40.468185, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 164 >[2011/12/15 11:33:40.468262, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.468497, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.469196, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.469380, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] >[2011/12/15 11:33:40.469486, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.469688, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.470382, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.470568, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] >[2011/12/15 11:33:40.470654, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.470857, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:33:40.472283, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.472471, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] >[2011/12/15 11:33:40.472557, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.472773, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(20) > [0] : 0x4e (78) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x20 (32) > [7] : 0x00 (0) > [8] : 0x4c (76) > [9] : 0x00 (0) > [10] : 0x6f (111) > [11] : 0x00 (0) > [12] : 0x67 (103) > [13] : 0x00 (0) > [14] : 0x6f (111) > [15] : 0x00 (0) > [16] : 0x6e (110) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > size : 0x00000014 (20) >[2011/12/15 11:33:40.474097, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.474284, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] >[2011/12/15 11:33:40.474369, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.474576, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:33:40.477715, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.477902, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] >[2011/12/15 11:33:40.477989, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.478192, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(164) > [0] : 0x46 (70) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6c (108) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x20 (32) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x65 (101) > [13] : 0x00 (0) > [14] : 0x72 (114) > [15] : 0x00 (0) > [16] : 0x76 (118) > [17] : 0x00 (0) > [18] : 0x69 (105) > [19] : 0x00 (0) > [20] : 0x63 (99) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x20 (32) > [25] : 0x00 (0) > [26] : 0x70 (112) > [27] : 0x00 (0) > [28] : 0x72 (114) > [29] : 0x00 (0) > [30] : 0x6f (111) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x69 (105) > [35] : 0x00 (0) > [36] : 0x64 (100) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x6e (110) > [41] : 0x00 (0) > [42] : 0x67 (103) > [43] : 0x00 (0) > [44] : 0x20 (32) > [45] : 0x00 (0) > [46] : 0x61 (97) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x65 (101) > [53] : 0x00 (0) > [54] : 0x73 (115) > [55] : 0x00 (0) > [56] : 0x73 (115) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x74 (116) > [61] : 0x00 (0) > [62] : 0x6f (111) > [63] : 0x00 (0) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x70 (112) > [67] : 0x00 (0) > [68] : 0x6f (111) > [69] : 0x00 (0) > [70] : 0x6c (108) > [71] : 0x00 (0) > [72] : 0x69 (105) > [73] : 0x00 (0) > [74] : 0x63 (99) > [75] : 0x00 (0) > [76] : 0x79 (121) > [77] : 0x00 (0) > [78] : 0x20 (32) > [79] : 0x00 (0) > [80] : 0x61 (97) > [81] : 0x00 (0) > [82] : 0x6e (110) > [83] : 0x00 (0) > [84] : 0x64 (100) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x70 (112) > [89] : 0x00 (0) > [90] : 0x72 (114) > [91] : 0x00 (0) > [92] : 0x6f (111) > [93] : 0x00 (0) > [94] : 0x66 (102) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6c (108) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x64 (100) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x74 (116) > [109] : 0x00 (0) > [110] : 0x61 (97) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x28 (40) > [115] : 0x00 (0) > [116] : 0x6e (110) > [117] : 0x00 (0) > [118] : 0x6f (111) > [119] : 0x00 (0) > [120] : 0x74 (116) > [121] : 0x00 (0) > [122] : 0x72 (114) > [123] : 0x00 (0) > [124] : 0x65 (101) > [125] : 0x00 (0) > [126] : 0x6d (109) > [127] : 0x00 (0) > [128] : 0x6f (111) > [129] : 0x00 (0) > [130] : 0x74 (116) > [131] : 0x00 (0) > [132] : 0x65 (101) > [133] : 0x00 (0) > [134] : 0x6c (108) > [135] : 0x00 (0) > [136] : 0x79 (121) > [137] : 0x00 (0) > [138] : 0x20 (32) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x61 (97) > [143] : 0x00 (0) > [144] : 0x6e (110) > [145] : 0x00 (0) > [146] : 0x61 (97) > [147] : 0x00 (0) > [148] : 0x67 (103) > [149] : 0x00 (0) > [150] : 0x65 (101) > [151] : 0x00 (0) > [152] : 0x61 (97) > [153] : 0x00 (0) > [154] : 0x62 (98) > [155] : 0x00 (0) > [156] : 0x6c (108) > [157] : 0x00 (0) > [158] : 0x65 (101) > [159] : 0x00 (0) > [160] : 0x29 (41) > [161] : 0x00 (0) > [162] : 0x00 (0) > [163] : 0x00 (0) > size : 0x000000a4 (164) >[2011/12/15 11:33:40.484657, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.484845, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] >[2011/12/15 11:33:40.484932, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.485128, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.485386, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.485577, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.485742, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.485822, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.485899, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.486255, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0068 (104) > name_size : 0x0068 (104) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:33:40.487452, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.487646, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' >[2011/12/15 11:33:40.487727, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.487803, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.487882, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.487955, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.488030, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.488100, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.488216, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.488294, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.488373, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.488446, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.488522, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.488593, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.488706, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.488788, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.488863, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.488942, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.489015, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.489091, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.489162, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.489301, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.489380, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2011/12/15 11:33:40.489478, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.489560, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.489664, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.489740, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.489811, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2011/12/15 11:33:40.489931, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.490009, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:33:40.490083, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.490165, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:33:40.490239, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:33:40.490315, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.490386, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:33:40.490493, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:33:40.490573, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.490652, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.490818, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.491254, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:33:40.495540, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.495683, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] >[2011/12/15 11:33:40.495750, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x9b1440) >[2011/12/15 11:33:40.495815, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2011/12/15 11:33:40.495908, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:33:40.495973, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.496129, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.496338, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.496480, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.496602, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.496664, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.496727, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.496998, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0062 (98) > name_size : 0x0062 (98) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:33:40.497944, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.498073, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' >[2011/12/15 11:33:40.498138, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.498201, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.498267, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.498328, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.498390, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.498452, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.498540, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.498619, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.498686, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.498746, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.498809, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.498868, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.498953, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.499019, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.499081, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.499147, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.499207, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.499270, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.499329, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.499426, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.499492, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2011/12/15 11:33:40.499553, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.499619, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.499680, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.499743, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.499803, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.499887, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.499953, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.500082, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.500402, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.500986, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.501112, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] >[2011/12/15 11:33:40.501175, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x9b1440) >[2011/12/15 11:33:40.501239, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.501323, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:33:40.501388, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:33:40.501463, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.501527, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:33:40.501591, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 48 >[2011/12/15 11:33:40.501655, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:33:40.501719, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 126 >[2011/12/15 11:33:40.501782, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.501927, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.502492, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.502616, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] >[2011/12/15 11:33:40.502680, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.502841, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.503408, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.503534, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] >[2011/12/15 11:33:40.503599, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.503746, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:33:40.504880, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.505021, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] >[2011/12/15 11:33:40.505086, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.505238, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(48) > [0] : 0x52 (82) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x6d (109) > [5] : 0x00 (0) > [6] : 0x6f (111) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x65 (101) > [11] : 0x00 (0) > [12] : 0x20 (32) > [13] : 0x00 (0) > [14] : 0x52 (82) > [15] : 0x00 (0) > [16] : 0x65 (101) > [17] : 0x00 (0) > [18] : 0x67 (103) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x74 (116) > [25] : 0x00 (0) > [26] : 0x72 (114) > [27] : 0x00 (0) > [28] : 0x79 (121) > [29] : 0x00 (0) > [30] : 0x20 (32) > [31] : 0x00 (0) > [32] : 0x53 (83) > [33] : 0x00 (0) > [34] : 0x65 (101) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x76 (118) > [39] : 0x00 (0) > [40] : 0x69 (105) > [41] : 0x00 (0) > [42] : 0x63 (99) > [43] : 0x00 (0) > [44] : 0x65 (101) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > size : 0x00000030 (48) >[2011/12/15 11:33:40.507073, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.507197, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] >[2011/12/15 11:33:40.507268, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.507415, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x73 (115) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:33:40.509919, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.510047, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] >[2011/12/15 11:33:40.510112, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.510259, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(126) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x72 (114) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x6d (109) > [59] : 0x00 (0) > [60] : 0x6f (111) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x65 (101) > [65] : 0x00 (0) > [66] : 0x20 (32) > [67] : 0x00 (0) > [68] : 0x61 (97) > [69] : 0x00 (0) > [70] : 0x63 (99) > [71] : 0x00 (0) > [72] : 0x63 (99) > [73] : 0x00 (0) > [74] : 0x65 (101) > [75] : 0x00 (0) > [76] : 0x73 (115) > [77] : 0x00 (0) > [78] : 0x73 (115) > [79] : 0x00 (0) > [80] : 0x20 (32) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x6f (111) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x74 (116) > [89] : 0x00 (0) > [90] : 0x68 (104) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x20 (32) > [95] : 0x00 (0) > [96] : 0x53 (83) > [97] : 0x00 (0) > [98] : 0x61 (97) > [99] : 0x00 (0) > [100] : 0x6d (109) > [101] : 0x00 (0) > [102] : 0x62 (98) > [103] : 0x00 (0) > [104] : 0x61 (97) > [105] : 0x00 (0) > [106] : 0x20 (32) > [107] : 0x00 (0) > [108] : 0x72 (114) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x67 (103) > [113] : 0x00 (0) > [114] : 0x69 (105) > [115] : 0x00 (0) > [116] : 0x73 (115) > [117] : 0x00 (0) > [118] : 0x74 (116) > [119] : 0x00 (0) > [120] : 0x72 (114) > [121] : 0x00 (0) > [122] : 0x79 (121) > [123] : 0x00 (0) > [124] : 0x00 (0) > [125] : 0x00 (0) > size : 0x0000007e (126) >[2011/12/15 11:33:40.514287, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.514416, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] >[2011/12/15 11:33:40.514487, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.514630, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.514836, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.514963, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.515106, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.515169, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.515232, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.515499, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0074 (116) > name_size : 0x0074 (116) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:33:40.516436, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.516565, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' >[2011/12/15 11:33:40.516630, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.516692, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.516757, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.516818, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.516879, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.516939, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.517023, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.517087, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.517152, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.517230, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.517292, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.517351, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.517436, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.517512, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.517573, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.517639, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.517700, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.517762, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.517821, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.517919, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.517985, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2011/12/15 11:33:40.518047, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.518113, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.518174, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.518236, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.518295, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2011/12/15 11:33:40.518378, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.518442, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:33:40.518510, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.518577, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:33:40.518639, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:33:40.518701, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.518761, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:33:40.518843, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:33:40.518908, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.518972, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.519098, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.519443, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:33:40.523322, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.523450, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] >[2011/12/15 11:33:40.523514, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x9b1440) >[2011/12/15 11:33:40.523578, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2011/12/15 11:33:40.523663, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:33:40.523728, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.523872, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.524080, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.524206, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.524331, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.524392, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.524455, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.524726, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x004e (78) > name_size : 0x004e (78) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2011/12/15 11:33:40.525692, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.525819, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' >[2011/12/15 11:33:40.525884, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.525945, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.526010, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.526071, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.526133, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.526192, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.526274, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.526338, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.526403, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.526468, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.526531, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.526590, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.526675, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.526741, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.526802, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.526868, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.526929, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.526991, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.527049, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.527147, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.527212, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2011/12/15 11:33:40.527273, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.527339, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.527400, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.527480, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.527540, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.527621, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.527687, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.527814, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.528131, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.528695, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.528822, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] >[2011/12/15 11:33:40.528884, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x9b1440) >[2011/12/15 11:33:40.528946, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.529029, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Start], len: 4 >[2011/12/15 11:33:40.529094, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Type], len: 4 >[2011/12/15 11:33:40.529158, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.529222, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ObjectName], len: 24 >[2011/12/15 11:33:40.529287, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 74 >[2011/12/15 11:33:40.529351, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ImagePath], len: 72 >[2011/12/15 11:33:40.529415, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Description], len: 178 >[2011/12/15 11:33:40.529488, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.529648, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.530210, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.530337, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] >[2011/12/15 11:33:40.530401, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.530549, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2011/12/15 11:33:40.531128, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.531255, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] >[2011/12/15 11:33:40.531320, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.531467, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2011/12/15 11:33:40.532614, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.532744, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] >[2011/12/15 11:33:40.532809, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.532962, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(74) > [0] : 0x57 (87) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6e (110) > [5] : 0x00 (0) > [6] : 0x64 (100) > [7] : 0x00 (0) > [8] : 0x6f (111) > [9] : 0x00 (0) > [10] : 0x77 (119) > [11] : 0x00 (0) > [12] : 0x73 (115) > [13] : 0x00 (0) > [14] : 0x20 (32) > [15] : 0x00 (0) > [16] : 0x49 (73) > [17] : 0x00 (0) > [18] : 0x6e (110) > [19] : 0x00 (0) > [20] : 0x74 (116) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x6e (110) > [27] : 0x00 (0) > [28] : 0x65 (101) > [29] : 0x00 (0) > [30] : 0x74 (116) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x4e (78) > [35] : 0x00 (0) > [36] : 0x61 (97) > [37] : 0x00 (0) > [38] : 0x6d (109) > [39] : 0x00 (0) > [40] : 0x65 (101) > [41] : 0x00 (0) > [42] : 0x20 (32) > [43] : 0x00 (0) > [44] : 0x53 (83) > [45] : 0x00 (0) > [46] : 0x65 (101) > [47] : 0x00 (0) > [48] : 0x72 (114) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x28 (40) > [61] : 0x00 (0) > [62] : 0x57 (87) > [63] : 0x00 (0) > [64] : 0x49 (73) > [65] : 0x00 (0) > [66] : 0x4e (78) > [67] : 0x00 (0) > [68] : 0x53 (83) > [69] : 0x00 (0) > [70] : 0x29 (41) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > size : 0x0000004a (74) >[2011/12/15 11:33:40.535528, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.535653, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] >[2011/12/15 11:33:40.535718, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.535898, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(72) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x68 (104) > [3] : 0x00 (0) > [4] : 0x6f (111) > [5] : 0x00 (0) > [6] : 0x6d (109) > [7] : 0x00 (0) > [8] : 0x65 (101) > [9] : 0x00 (0) > [10] : 0x2f (47) > [11] : 0x00 (0) > [12] : 0x64 (100) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x2f (47) > [17] : 0x00 (0) > [18] : 0x62 (98) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x6e (110) > [23] : 0x00 (0) > [24] : 0x2f (47) > [25] : 0x00 (0) > [26] : 0x73 (115) > [27] : 0x00 (0) > [28] : 0x61 (97) > [29] : 0x00 (0) > [30] : 0x6d (109) > [31] : 0x00 (0) > [32] : 0x62 (98) > [33] : 0x00 (0) > [34] : 0x61 (97) > [35] : 0x00 (0) > [36] : 0x33 (51) > [37] : 0x00 (0) > [38] : 0x2f (47) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x62 (98) > [45] : 0x00 (0) > [46] : 0x2f (47) > [47] : 0x00 (0) > [48] : 0x73 (115) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x63 (99) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x74 (116) > [57] : 0x00 (0) > [58] : 0x6c (108) > [59] : 0x00 (0) > [60] : 0x2f (47) > [61] : 0x00 (0) > [62] : 0x6e (110) > [63] : 0x00 (0) > [64] : 0x6d (109) > [65] : 0x00 (0) > [66] : 0x62 (98) > [67] : 0x00 (0) > [68] : 0x64 (100) > [69] : 0x00 (0) > [70] : 0x00 (0) > [71] : 0x00 (0) > size : 0x00000048 (72) >[2011/12/15 11:33:40.538414, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.538543, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] >[2011/12/15 11:33:40.538608, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.538755, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(178) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x61 (97) > [55] : 0x00 (0) > [56] : 0x20 (32) > [57] : 0x00 (0) > [58] : 0x4e (78) > [59] : 0x00 (0) > [60] : 0x65 (101) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x42 (66) > [65] : 0x00 (0) > [66] : 0x49 (73) > [67] : 0x00 (0) > [68] : 0x4f (79) > [69] : 0x00 (0) > [70] : 0x53 (83) > [71] : 0x00 (0) > [72] : 0x20 (32) > [73] : 0x00 (0) > [74] : 0x70 (112) > [75] : 0x00 (0) > [76] : 0x6f (111) > [77] : 0x00 (0) > [78] : 0x69 (105) > [79] : 0x00 (0) > [80] : 0x6e (110) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x2d (45) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x6f (111) > [89] : 0x00 (0) > [90] : 0x2d (45) > [91] : 0x00 (0) > [92] : 0x70 (112) > [93] : 0x00 (0) > [94] : 0x6f (111) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6e (110) > [99] : 0x00 (0) > [100] : 0x74 (116) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x6e (110) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x6d (109) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x73 (115) > [115] : 0x00 (0) > [116] : 0x65 (101) > [117] : 0x00 (0) > [118] : 0x72 (114) > [119] : 0x00 (0) > [120] : 0x76 (118) > [121] : 0x00 (0) > [122] : 0x65 (101) > [123] : 0x00 (0) > [124] : 0x72 (114) > [125] : 0x00 (0) > [126] : 0x28 (40) > [127] : 0x00 (0) > [128] : 0x6e (110) > [129] : 0x00 (0) > [130] : 0x6f (111) > [131] : 0x00 (0) > [132] : 0x74 (116) > [133] : 0x00 (0) > [134] : 0x20 (32) > [135] : 0x00 (0) > [136] : 0x72 (114) > [137] : 0x00 (0) > [138] : 0x65 (101) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x6f (111) > [143] : 0x00 (0) > [144] : 0x74 (116) > [145] : 0x00 (0) > [146] : 0x65 (101) > [147] : 0x00 (0) > [148] : 0x6c (108) > [149] : 0x00 (0) > [150] : 0x79 (121) > [151] : 0x00 (0) > [152] : 0x20 (32) > [153] : 0x00 (0) > [154] : 0x6d (109) > [155] : 0x00 (0) > [156] : 0x61 (97) > [157] : 0x00 (0) > [158] : 0x6e (110) > [159] : 0x00 (0) > [160] : 0x61 (97) > [161] : 0x00 (0) > [162] : 0x67 (103) > [163] : 0x00 (0) > [164] : 0x65 (101) > [165] : 0x00 (0) > [166] : 0x61 (97) > [167] : 0x00 (0) > [168] : 0x62 (98) > [169] : 0x00 (0) > [170] : 0x6c (108) > [171] : 0x00 (0) > [172] : 0x65 (101) > [173] : 0x00 (0) > [174] : 0x29 (41) > [175] : 0x00 (0) > [176] : 0x00 (0) > [177] : 0x00 (0) > size : 0x000000b2 (178) >[2011/12/15 11:33:40.544376, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.544502, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] >[2011/12/15 11:33:40.544567, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.544710, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.544916, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.545040, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.545162, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.545224, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.545287, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.545561, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0060 (96) > name_size : 0x0060 (96) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2011/12/15 11:33:40.546519, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.546648, 10] rpc_server/winreg/srv_winreg_nt.c:782(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' >[2011/12/15 11:33:40.546713, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.546776, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.546841, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.546902, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.546964, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.547023, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.547106, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.547170, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.547235, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.547296, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.547358, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.547419, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.547505, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.547572, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.547634, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.547699, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.547760, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.547822, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.547882, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.547982, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.548050, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2011/12/15 11:33:40.548112, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.548178, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.548256, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.548320, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.548379, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2011/12/15 11:33:40.548464, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.548529, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2011/12/15 11:33:40.548591, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (4->5) >[2011/12/15 11:33:40.548656, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:33:40.548717, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:33:40.548780, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.548839, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:33:40.548917, 10] registry/reg_backend_db.c:1630(regdb_fetch_keys_internal) > regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:33:40.548981, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (5->4) >[2011/12/15 11:33:40.549045, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.549171, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-d4a2ba730000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2011/12/15 11:33:40.549507, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-d4a2ba730000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2011/12/15 11:33:40.553425, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.554018, 8] rpc_server/winreg/srv_winreg_nt.c:812(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] >[2011/12/15 11:33:40.554082, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x9b1440) >[2011/12/15 11:33:40.554147, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2011/12/15 11:33:40.554231, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [Security], len: 120 >[2011/12/15 11:33:40.554296, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2011/12/15 11:33:40.554438, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.554651, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.554778, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.554917, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.554979, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.555042, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.555306, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.555514, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.555643, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.555770, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.555844, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:33:40.555909, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.556165, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (2->1) >[2011/12/15 11:33:40.556257, 3] rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) > Initialise the eventlog registry keys if needed. >[2011/12/15 11:33:40.556322, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \winreg >[2011/12/15 11:33:40.556393, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 2 for pipe \winreg >[2011/12/15 11:33:40.556466, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \winreg (pipes_open=0) >[2011/12/15 11:33:40.556540, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:40.556904, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2011/12/15 11:33:40.556968, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (1->2) >[2011/12/15 11:33:40.557049, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2011/12/15 11:33:40.557112, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2011/12/15 11:33:40.557173, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.557233, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM] >[2011/12/15 11:33:40.557326, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.557473, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-e94e-d4a2ba730000 > result : WERR_OK >[2011/12/15 11:33:40.557759, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-e94e-d4a2ba730000 > keyname: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Eventlog' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:40.558491, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.558623, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2011/12/15 11:33:40.558685, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:33:40.558750, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2011/12/15 11:33:40.558811, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2011/12/15 11:33:40.558873, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.558932, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM] >[2011/12/15 11:33:40.559022, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2011/12/15 11:33:40.559086, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.559151, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.559212, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.559293, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.559354, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet] >[2011/12/15 11:33:40.559446, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.559510, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2011/12/15 11:33:40.559572, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.559638, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.559699, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.559761, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.559820, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2011/12/15 11:33:40.559926, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.559991, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Eventlog] >[2011/12/15 11:33:40.560053, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (3->4) >[2011/12/15 11:33:40.560119, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.560180, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.560242, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:40.560301, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.560388, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (4->3) >[2011/12/15 11:33:40.560454, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.560577, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-d4a2ba730000 > result : WERR_OK >[2011/12/15 11:33:40.560835, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-d4a2ba730000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2011/12/15 11:33:40.561180, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.561336, 10] registry/reg_dispatcher.c:150(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x9b1440) >[2011/12/15 11:33:40.561400, 10] registry/reg_backend_db.c:1764(regdb_fetch_values_internal) > regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.561515, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [DisplayName], len: 20 >[2011/12/15 11:33:40.561581, 8] registry/reg_backend_db.c:1710(regdb_unpack_values) > specific: [ErrorControl], len: 4 >[2011/12/15 11:33:40.561646, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2011/12/15 11:33:40.561737, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000000 (0) > max_subkeylen : * > max_subkeylen : 0x00000000 (0) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000002 (2) > max_valnamelen : * > max_valnamelen : 0x0000001a (26) > max_valbufsize : * > max_valbufsize : 0x00000014 (20) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2011/12/15 11:33:40.562449, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-e94e-d4a2ba730000 >[2011/12/15 11:33:40.562659, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.562784, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 E9 4E D4 A2 ........ .....N.. > [0010] BA 73 00 00 .s.. >[2011/12/15 11:33:40.562906, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:40.562967, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:33:40.563030, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:40.563320, 3] printing/pcap.c:138(pcap_cache_reload) > reloading printcap cache >[2011/12/15 11:33:40.563415, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 5052494E5445524C4953 >[2011/12/15 11:33:40.563490, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219f7858 >[2011/12/15 11:33:40.563663, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 5052494E5445524C4953 >[2011/12/15 11:33:40.563763, 0] printing/print_standard.c:68(std_pcap_cache_reload) > Unable to open printcap file /etc/printcap for read! >[2011/12/15 11:33:40.563825, 3] printing/pcap.c:189(pcap_cache_reload) > reload status: error >[2011/12/15 11:33:40.563908, 3] printing/printing.c:1644(start_background_queue) > start_background_queue: Starting background LPQ thread >[2011/12/15 11:33:40.564430, 10] lib/util_sock.c:681(open_socket_in) > bind succeeded on port 445 >[2011/12/15 11:33:40.564570, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:40.565135, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:40.565834, 10] lib/util_sock.c:681(open_socket_in) > bind succeeded on port 139 >[2011/12/15 11:33:40.565948, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:40.566497, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:40.567156, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BA730000FFFFFFFF >[2011/12/15 11:33:40.567269, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219f6800 >[2011/12/15 11:33:40.567454, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BA730000FFFFFFFF >[2011/12/15 11:33:40.567568, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(parent_housekeeping) 0x219f7a10 >[2011/12/15 11:33:40.567657, 5] lib/messages.c:300(messaging_register) > Overriding messaging pointer for type 1 - private_data=(nil) >[2011/12/15 11:33:40.567844, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (2->1) >[2011/12/15 11:33:40.567927, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (1->0) >[2011/12/15 11:33:40.568023, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \winreg >[2011/12/15 11:33:40.568153, 2] smbd/server.c:836(smbd_parent_loop) > waiting for connections >[2011/12/15 11:33:40.568409, 5] printing/printing.c:1667(start_background_queue) > start_background_queue: background LPQ thread started >[2011/12/15 11:33:40.568998, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BB730000FFFFFFFF >[2011/12/15 11:33:40.569146, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219fb358 >[2011/12/15 11:33:40.569268, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BB730000FFFFFFFF >[2011/12/15 11:33:40.569373, 5] printing/printing.c:1703(start_background_queue) > start_background_queue: background LPQ thread waiting for messages >[2011/12/15 11:33:47.327364, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BE730000FFFFFFFF >[2011/12/15 11:33:47.327610, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219f24b8 >[2011/12/15 11:33:47.327706, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BE730000FFFFFFFF >[2011/12/15 11:33:47.327801, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:47.328306, 5] lib/util_sock.c:162(print_socket_options) > Socket options: > SO_KEEPALIVE = 1 > SO_REUSEADDR = 1 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 16384 > SO_RCVBUF = 87380 > SO_SNDLOWAT = 1 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 > TCP_QUICKACK = 1 >[2011/12/15 11:33:47.328900, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:47.329043, 3] lib/access.c:338(allow_access) > Allowed connection from 81.95.129.43 (81.95.129.43) >[2011/12/15 11:33:47.329104, 10] smbd/process.c:3018(smbd_process) > Connection allowed from ipv4:81.95.129.43:2109 to ipv4:194.87.37.17:445 >[2011/12/15 11:33:47.329221, 3] smbd/oplock.c:922(init_oplocks) > init_oplocks: initializing messages. >[2011/12/15 11:33:47.329379, 3] smbd/oplock_linux.c:226(linux_init_kernel_oplocks) > Linux kernel oplocks enabled >[2011/12/15 11:33:47.329457, 5] lib/messages.c:332(messaging_deregister) > Deregistering messaging pointer for type 1 - private_data=(nil) >[2011/12/15 11:33:47.329536, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(keepalive) 0x219ec350 >[2011/12/15 11:33:47.329606, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(deadtime) 0x219f41d0 >[2011/12/15 11:33:47.329676, 10] smbd/process.c:919(event_add_idle) > event_add_idle: idle_evt(housekeeping) 0x219f3fb0 >[2011/12/15 11:33:47.329798, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 133 >[2011/12/15 11:33:47.329873, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x85 >[2011/12/15 11:33:47.329934, 3] smbd/process.c:1661(process_smb) > Transaction 0 of length 137 (0 toread) >[2011/12/15 11:33:47.329994, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.330030, 5] lib/util.c:342(show_msg) > size=133 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51283 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=0 > smb_bcc=98 >[2011/12/15 11:33:47.330346, 10] ../lib/util/util.c:415(dump_data) > [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG > [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 > [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for > [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. > [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM > [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 > [0060] 32 00 2. >[2011/12/15 11:33:47.330731, 3] smbd/process.c:1466(switch_message) > switch message SMBnegprot (pid 29630) conn 0x0 >[2011/12/15 11:33:47.330800, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.330868, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.330938, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.331057, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:47.331445, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [PC NETWORK PROGRAM 1.0] >[2011/12/15 11:33:47.331519, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LANMAN1.0] >[2011/12/15 11:33:47.331582, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [Windows for Workgroups 3.1a] >[2011/12/15 11:33:47.331664, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LM1.2X002] >[2011/12/15 11:33:47.331727, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [LANMAN2.1] >[2011/12/15 11:33:47.331789, 3] smbd/negprot.c:598(reply_negprot) > Requested protocol [NT LM 0.12] >[2011/12/15 11:33:47.331857, 10] lib/util.c:1624(set_remote_arch) > set_remote_arch: Client arch is 'Win2K' >[2011/12/15 11:33:47.331936, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:47.332068, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BE730000FFFFFFFF >[2011/12/15 11:33:47.332137, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a02b30 >[2011/12/15 11:33:47.332216, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BE730000FFFFFFFF >[2011/12/15 11:33:47.332304, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:47.332454, 10] smbd/negprot.c:44(get_challenge) > get challenge: creating negprot_global_auth_context >[2011/12/15 11:33:47.332517, 5] auth/auth.c:508(make_auth_context_subsystem) > Making default auth method list for security=share, encrypt passwords = yes >[2011/12/15 11:33:47.332589, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam >[2011/12/15 11:33:47.332653, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam' >[2011/12/15 11:33:47.332713, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam_ignoredomain >[2011/12/15 11:33:47.332773, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam_ignoredomain' >[2011/12/15 11:33:47.332836, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend unix >[2011/12/15 11:33:47.332897, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'unix' >[2011/12/15 11:33:47.332956, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend winbind >[2011/12/15 11:33:47.333016, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'winbind' >[2011/12/15 11:33:47.333079, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend wbc >[2011/12/15 11:33:47.333141, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'wbc' >[2011/12/15 11:33:47.333200, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend smbserver >[2011/12/15 11:33:47.333260, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'smbserver' >[2011/12/15 11:33:47.333323, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend trustdomain >[2011/12/15 11:33:47.333384, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'trustdomain' >[2011/12/15 11:33:47.333452, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend ntdomain >[2011/12/15 11:33:47.333513, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'ntdomain' >[2011/12/15 11:33:47.333576, 5] auth/auth.c:48(smb_register_auth) > Attempting to register auth backend guest >[2011/12/15 11:33:47.333637, 5] auth/auth.c:60(smb_register_auth) > Successfully added auth method 'guest' >[2011/12/15 11:33:47.333696, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2011/12/15 11:33:47.333757, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method guest has a valid init >[2011/12/15 11:33:47.333817, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam >[2011/12/15 11:33:47.333878, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method sam has a valid init >[2011/12/15 11:33:47.333938, 10] smbd/negprot.c:52(get_challenge) > get challenge: getting challenge >[2011/12/15 11:33:47.334016, 5] auth/auth.c:99(get_ntlm_challenge) > auth_get_challenge: module guest did not want to specify a challenge >[2011/12/15 11:33:47.334077, 5] auth/auth.c:99(get_ntlm_challenge) > auth_get_challenge: module sam did not want to specify a challenge >[2011/12/15 11:33:47.334148, 5] auth/auth.c:134(get_ntlm_challenge) > auth_context challenge created by random >[2011/12/15 11:33:47.334208, 5] auth/auth.c:135(get_ntlm_challenge) > challenge is: >[2011/12/15 11:33:47.334270, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:47.334355, 3] smbd/negprot.c:401(reply_nt1) > not using SPNEGO >[2011/12/15 11:33:47.334415, 3] smbd/negprot.c:704(reply_negprot) > Selected protocol NT LM 0.12 >[2011/12/15 11:33:47.334480, 5] smbd/negprot.c:711(reply_negprot) > negprot index=5 >[2011/12/15 11:33:47.334541, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.334578, 5] lib/util.c:342(show_msg) > size=87 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=0 > smt_wct=17 > smb_vwv[ 0]= 5 (0x5) > smb_vwv[ 1]=12802 (0x3202) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]=48640 (0xBE00) > smb_vwv[ 8]= 115 (0x73) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]=33011 (0x80F3) > smb_vwv[11]=32512 (0x7F00) > smb_vwv[12]=46841 (0xB6F9) > smb_vwv[13]=64481 (0xFBE1) > smb_vwv[14]=52410 (0xCCBA) > smb_vwv[15]= 4097 (0x1001) > smb_vwv[16]= 2303 (0x8FF) > smb_bcc=18 >[2011/12/15 11:33:47.335296, 10] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 54 00 45 00 53 00 54 00 .>2....b T.E.S.T. > [0010] 00 00 .. >[2011/12/15 11:33:47.341056, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 272 >[2011/12/15 11:33:47.341147, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x110 >[2011/12/15 11:33:47.341208, 3] smbd/process.c:1661(process_smb) > Transaction 1 of length 276 (0 toread) >[2011/12/15 11:33:47.341269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.341304, 5] lib/util.c:342(show_msg) > size=272 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=64 > smt_wct=13 > smb_vwv[ 0]= 117 (0x75) > smb_vwv[ 1]= 186 (0xBA) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=29630 (0x73BE) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1 (0x1) > smb_vwv[ 8]= 1 (0x1) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 212 (0xD4) > smb_vwv[12]= 0 (0x0) > smb_bcc=125 >[2011/12/15 11:33:47.341931, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 64 00 6D 00 00 00 44 00 4D 00 54 00 45 ...d.m.. .D.M.T.E > [0010] 00 53 00 54 00 00 00 57 00 69 00 6E 00 64 00 6F .S.T...W .i.n.d.o > [0020] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. > [0030] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [0040] 00 50 00 61 00 63 00 6B 00 20 00 33 00 20 00 32 .P.a.c.k . .3. .2 > [0050] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d > [0060] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0070] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... >[2011/12/15 11:33:47.342332, 3] smbd/process.c:1466(switch_message) > switch message SMBsesssetupX (pid 29630) conn 0x0 >[2011/12/15 11:33:47.342394, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.342463, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.342523, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.342617, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:47.342704, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) > wct=13 flg2=0xc807 >[2011/12/15 11:33:47.342778, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) > Domain=[DMTEST] NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2011/12/15 11:33:47.342841, 10] lib/util.c:1624(set_remote_arch) > set_remote_arch: Client arch is 'WinXP' >[2011/12/15 11:33:47.342904, 2] smbd/sesssetup.c:1279(setup_new_vc_session) > setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. >[2011/12/15 11:33:47.342965, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) > sesssetupX:name=[DMTEST]\[dm]@[81.95.129.43] >[2011/12/15 11:33:47.343047, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:47.343183, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user dm >[2011/12/15 11:33:47.343243, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is dm >[2011/12/15 11:33:47.343401, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [dm]! >[2011/12/15 11:33:47.343469, 3] smbd/sesssetup.c:151(check_guest_password) > Got anonymous request >[2011/12/15 11:33:47.343529, 5] auth/auth.c:508(make_auth_context_subsystem) > Making default auth method list for security=share, encrypt passwords = yes >[2011/12/15 11:33:47.343594, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2011/12/15 11:33:47.343656, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method guest has a valid init >[2011/12/15 11:33:47.343716, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam >[2011/12/15 11:33:47.343777, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method sam has a valid init >[2011/12/15 11:33:47.343838, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for () >[2011/12/15 11:33:47.343899, 5] auth/user_info.c:70(make_user_info) > making strings for 's user_info struct >[2011/12/15 11:33:47.343960, 5] auth/user_info.c:87(make_user_info) > making blobs for 's user_info struct >[2011/12/15 11:33:47.344019, 10] auth/user_info.c:123(make_user_info) > made a user_info for () >[2011/12/15 11:33:47.344079, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface >[2011/12/15 11:33:47.344139, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: []\[]@[] >[2011/12/15 11:33:47.344199, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by fixed >[2011/12/15 11:33:47.344259, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:47.344317, 5] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 ........ >[2011/12/15 11:33:47.344401, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [] >[2011/12/15 11:33:47.344484, 3] auth/auth.c:268(check_ntlm_password) > check_ntlm_password: guest authentication for user [] succeeded >[2011/12/15 11:33:47.344545, 5] auth/auth.c:309(check_ntlm_password) > check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded >[2011/12/15 11:33:47.344616, 3] smbd/process.c:1466(switch_message) > switch message SMBtconX (pid 29630) conn 0x0 >[2011/12/15 11:33:47.344678, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.344738, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.344797, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.344891, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:47.344985, 4] smbd/reply.c:794(reply_tcon_and_X) > Client requested device type [?????] for share [IPC$] >[2011/12/15 11:33:47.345074, 5] smbd/service.c:1267(make_connection) > making a connection to 'normal' service ipc$ >[2011/12/15 11:33:47.345140, 3] lib/access.c:338(allow_access) > Allowed connection from 81.95.129.43 (81.95.129.43) >[2011/12/15 11:33:47.345213, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user IPC$ >[2011/12/15 11:33:47.345273, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is ipc$ >[2011/12/15 11:33:47.345387, 5] lib/username.c:124(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as given is IPC$ >[2011/12/15 11:33:47.345504, 5] lib/username.c:143(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in ipc$ >[2011/12/15 11:33:47.345566, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [IPC$]! >[2011/12/15 11:33:47.345636, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.345729, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.345807, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:47.345879, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:47.345951, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:47.346021, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:47.346091, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:47.346166, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:47.346238, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:47.346308, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:47.346378, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:47.346509, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:47.346582, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:47.346659, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:47.346733, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:47.346816, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.346896, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.346968, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.347041, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.347111, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.347279, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:47.347395, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.347469, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:47.347546, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.347630, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.347748, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.347825, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.347897, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:47.347971, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:47.348043, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:47.348115, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:47.348185, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:47.348260, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:47.348332, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:47.348403, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:47.348473, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:47.348582, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:47.348653, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:47.348730, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:47.348802, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:47.348880, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.348955, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.349026, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.349098, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.349168, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.349308, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:47.349420, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.349497, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:47.349571, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.349646, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.349732, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.349806, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.349879, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:47.349953, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:47.350024, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:47.350096, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:47.350166, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:47.350240, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:47.350343, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:47.350415, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:47.350504, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:47.350614, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:47.350687, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:47.350764, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:47.350836, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:47.350913, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.350989, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.351060, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.351131, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.351201, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.351341, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:47.351453, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.351527, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:47.351600, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.351677, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.351762, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.351836, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:47.351908, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:47.351981, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:47.352053, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:47.352126, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:47.352197, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:47.352271, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:47.352341, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:47.352412, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:47.352482, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:47.352591, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:47.352662, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:47.352739, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:47.352811, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:47.352888, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.352993, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.353065, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.353137, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.353207, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.353348, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:47.353460, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.353537, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:47.353610, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.353685, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:47.353775, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.353849, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.353925, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.353996, 3] smbd/password.c:720(authorise_login) > authorise_login: ACCEPTED: guest account and guest ok (nobody) >[2011/12/15 11:33:47.354077, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.354148, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.354221, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.354315, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:33:47.354391, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:47.354559, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.354638, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.354713, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.354799, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:33:47.354884, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:33:47.354958, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:33:47.355042, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:33:47.355127, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:33:47.355231, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was nobody >[2011/12/15 11:33:47.355304, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-22-1-65534 >[2011/12/15 11:33:47.355434, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for nobody >[2011/12/15 11:33:47.355513, 10] auth/server_info.c:354(samu_to_SamInfo3) > Unix User found in struct samu. Rid marked as special and sid (S-1-22-1-65534) saved as extra sid >[2011/12/15 11:33:47.355603, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.355676, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.355784, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.355914, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:33:47.356132, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: ROCK\nobody => domain=[ROCK], name=[nobody] >[2011/12/15 11:33:47.356210, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:47.356287, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.356362, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.356433, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.356505, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.356576, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.356718, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:47.356829, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.356907, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.356980, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.357051, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.357122, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.357193, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.357341, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.357426, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:33:47.357501, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:47.357592, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.357663, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.357739, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.357827, 10] passdb/lookup_sid.c:1527(sid_to_uid) > sid S-1-22-1-65534 -> uid 65534 >[2011/12/15 11:33:47.358002, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:33:47.358178, 10] auth/token_util.c:339(create_local_nt_token) > Create local NT token for S-1-22-1-65534 >[2011/12/15 11:33:47.358339, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:33:47.358419, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.358515, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.358587, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.358658, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.358728, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.358891, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.358967, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:33:47.359043, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.359115, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.359221, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.359293, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.359363, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.359519, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:47.359602, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.359721, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:33:47.359808, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.359889, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.359974, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.360058, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.360141, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.360295, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.360378, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:33:47.360461, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.360548, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.360620, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.360691, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.360759, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.360888, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:47.360970, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.361046, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.361118, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.361188, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.361260, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.361330, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.361560, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.361674, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-65534] >[2011/12/15 11:33:47.361762, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-65534] >[2011/12/15 11:33:47.361852, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:33:47.361964, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:33:47.362049, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2011/12/15 11:33:47.362260, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:33:47.362346, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.362472, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.362547, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.362619, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.362689, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.362840, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.362915, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:47.362990, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:47.363066, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.363138, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.363209, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.363280, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.363350, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.363500, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.363576, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:47.363650, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:47.363725, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.363799, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.363870, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.363941, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.364011, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.364162, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.364237, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:47.364313, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:47.364389, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:33:47.364463, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:33:47.364536, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2011/12/15 11:33:47.364614, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:47.364902, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:47.365047, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:47.365120, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:47.365196, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:47.365293, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2011/12/15 11:33:47.365400, 3] smbd/service.c:845(make_connection_snum) > Connect path is '/tmp' for service [IPC$] >[2011/12/15 11:33:47.365517, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:47.365602, 10] ../libcli/security/access_check.c:177(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x101f01ff, remaining = 0x101f01ff >[2011/12/15 11:33:47.365683, 3] smbd/vfs.c:102(vfs_init_default) > Initialising default vfs hooks >[2011/12/15 11:33:47.365761, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ >[2011/12/15 11:33:47.365833, 5] smbd/vfs.c:92(smb_register_vfs) > Successfully added vfs backend '/[Default VFS]/' >[2011/12/15 11:33:47.365912, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for posixacl >[2011/12/15 11:33:47.365984, 5] smbd/vfs.c:92(smb_register_vfs) > Successfully added vfs backend 'posixacl' >[2011/12/15 11:33:47.366054, 3] smbd/vfs.c:128(vfs_init_custom) > Initialising custom vfs hooks from [/[Default VFS]/] >[2011/12/15 11:33:47.366127, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ > Successfully loaded vfs module [/[Default VFS]/] with the new modules system >[2011/12/15 11:33:47.366239, 5] smbd/connection.c:134(claim_connection) > claiming [IPC$] >[2011/12/15 11:33:47.366507, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:47.366616, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219fa230 >[2011/12/15 11:33:47.367313, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:47.367638, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2011/12/15 11:33:47.367729, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share IPC$ is ok for unix user nobody >[2011/12/15 11:33:47.367808, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share IPC$ is read-only for unix user nobody >[2011/12/15 11:33:47.367905, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:47.367992, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.368069, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:47.368353, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:47.368511, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:47.368597, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.368669, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.368739, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.368858, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:47.368949, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2011/12/15 11:33:47.369043, 3] smbd/service.c:1089(make_connection_snum) > 81.95.129.43 (81.95.129.43) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 29630) >[2011/12/15 11:33:47.369137, 3] smbd/reply.c:871(reply_tcon_and_X) > tconX service=IPC$ >[2011/12/15 11:33:47.372716, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.372904, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.372978, 3] smbd/process.c:1661(process_smb) > Transaction 2 of length 104 (0 toread) >[2011/12/15 11:33:47.373051, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.373093, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=128 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 256 (0x100) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.374136, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 77 00 6B 00 73 00 73 00 76 00 63 00 00 .\.w.k.s .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.374321, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.374404, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share IPC$ is ok for unix user nobody >[2011/12/15 11:33:47.374552, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share IPC$ is read-only for unix user nobody >[2011/12/15 11:33:47.374638, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:47.374710, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.374775, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:47.375012, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:47.375135, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:47.375205, 4] smbd/vfs.c:780(vfs_ChDir) > vfs_ChDir to /tmp >[2011/12/15 11:33:47.375295, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = wkssvc >[2011/12/15 11:33:47.375369, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \wkssvc. >[2011/12/15 11:33:47.375439, 5] smbd/files.c:126(file_new) > allocated file structure 4453, fnum = 8549 (1 used) >[2011/12/15 11:33:47.375510, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/wkssvc hash 0x2b4dd005 >[2011/12/15 11:33:47.375601, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \wkssvc >[2011/12/15 11:33:47.375689, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \wkssvc >[2011/12/15 11:33:47.375754, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \wkssvc >[2011/12/15 11:33:47.375824, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \wkssvc (pipes_open=0) >[2011/12/15 11:33:47.375889, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \wkssvc >[2011/12/15 11:33:47.377927, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.378024, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.378085, 3] smbd/process.c:1661(process_smb) > Transaction 3 of length 140 (0 toread) >[2011/12/15 11:33:47.378145, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.378181, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=192 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8549 (0x2165) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.378831, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 98 D0 FF 6B 12 A1 10 36 98 33 46 C3 F8 7E 34 ....k... 6.3F..~4 > [0030] 5A 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 Z.....]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.379100, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.379163, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.379235, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 2165 name: wkssvc len: 72 >[2011/12/15 11:33:47.379297, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.379362, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.379422, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.379483, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.379544, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.379603, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.379662, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.379727, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.379787, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.379846, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.379910, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.380001, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 6bffd098-a112-3610-9833-46c3f87e345a > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.380924, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.380990, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.381055, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.381115, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \wkssvc >[2011/12/15 11:33:47.381176, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.381268, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\wkssvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.382123, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.382204, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.384457, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.384528, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.384588, 3] smbd/process.c:1661(process_smb) > Transaction 4 of length 63 (0 toread) >[2011/12/15 11:33:47.384648, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.384684, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=256 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8549 (0x2165) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.385295, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.385333, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.385396, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.385468, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.385532, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.385595, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.385678, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.385740, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.389358, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.389428, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.389494, 3] smbd/process.c:1661(process_smb) > Transaction 5 of length 168 (0 toread) >[2011/12/15 11:33:47.389554, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.389590, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=320 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8549 (0x2165) > smb_bcc=97 >[2011/12/15 11:33:47.390274, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 00 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 64 00 00 ...c.o.m .....d.. > [0060] 00 . >[2011/12/15 11:33:47.390644, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.390706, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.390777, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.390841, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.390900, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.390963, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.391023, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "wkssvc" (pnum 2165) >[2011/12/15 11:33:47.391083, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.391145, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.391207, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.391267, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.391327, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.391406, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.391467, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.391526, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.391588, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.391648, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.391707, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.391768, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.391833, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0000 (0) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 64 00 00 00 ....d... >[2011/12/15 11:33:47.392675, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.392735, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.392797, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\wkssvc >[2011/12/15 11:33:47.392859, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO >[2011/12/15 11:33:47.392926, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[0].fn == 0x3a14b2 >[2011/12/15 11:33:47.392996, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > in: struct wkssvc_NetWkstaGetInfo > server_name : * > server_name : '\\rock.dwide.com' > level : 0x00000064 (100) >[2011/12/15 11:33:47.393188, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > out: struct wkssvc_NetWkstaGetInfo > info : * > info : union wkssvc_NetWkstaInfo(case 100) > info100 : * > info100: struct wkssvc_NetWkstaInfo100 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > domain_name : * > domain_name : 'TEST' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > result : WERR_OK >[2011/12/15 11:33:47.393668, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \wkssvc successfully >[2011/12/15 11:33:47.393734, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.393818, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.393881, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 80. >[2011/12/15 11:33:47.393954, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0068 (104) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000050 (80) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=80 > [0000] 64 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 d....... ........ > [0010] 0C 00 02 00 04 00 00 00 09 00 00 00 05 00 00 00 ........ ........ > [0020] 00 00 00 00 05 00 00 00 52 00 4F 00 43 00 4B 00 ........ R.O.C.K. > [0030] 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 00 ........ ........ > [0040] 54 00 45 00 53 00 54 00 00 00 00 00 00 00 00 00 T.E.S.T. ........ >[2011/12/15 11:33:47.394824, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 54 >[2011/12/15 11:33:47.394898, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 104 bytes. There is no more data outstanding >[2011/12/15 11:33:47.394961, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..104] (align 0) >[2011/12/15 11:33:47.395023, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.395059, 5] lib/util.c:342(show_msg) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=320 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:47.395606, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h...... > [0010] 00 50 00 00 00 00 00 00 00 64 00 00 00 04 00 02 .P...... .d...... > [0020] 00 F4 01 00 00 08 00 02 00 0C 00 02 00 04 00 00 ........ ........ > [0030] 00 09 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ > [0040] 00 52 00 4F 00 43 00 4B 00 00 00 00 00 05 00 00 .R.O.C.K ........ > [0050] 00 00 00 00 00 05 00 00 00 54 00 45 00 53 00 54 ........ .T.E.S.T > [0060] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:47.398731, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.398803, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.398863, 3] smbd/process.c:1661(process_smb) > Transaction 6 of length 45 (0 toread) >[2011/12/15 11:33:47.398943, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.398979, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=384 > smt_wct=3 > smb_vwv[ 0]= 8549 (0x2165) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.399362, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.399400, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.399462, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.399522, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8549 (numopen=1) >[2011/12/15 11:33:47.399593, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.399682, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \wkssvc >[2011/12/15 11:33:47.399749, 5] smbd/files.c:464(file_free) > freed files structure 8549 (0 used) >[2011/12/15 11:33:47.399811, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.399848, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=384 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.400160, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.402491, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.402560, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.402620, 3] smbd/process.c:1661(process_smb) > Transaction 7 of length 104 (0 toread) >[2011/12/15 11:33:47.402680, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.402716, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=448 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.403586, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.403704, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.403766, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.403828, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = srvsvc >[2011/12/15 11:33:47.403894, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \srvsvc. >[2011/12/15 11:33:47.403958, 5] smbd/files.c:126(file_new) > allocated file structure 4454, fnum = 8550 (1 used) >[2011/12/15 11:33:47.404025, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/srvsvc hash 0x8e98a76a >[2011/12/15 11:33:47.404091, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \srvsvc >[2011/12/15 11:33:47.404160, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \srvsvc >[2011/12/15 11:33:47.404221, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \srvsvc >[2011/12/15 11:33:47.404309, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \srvsvc (pipes_open=0) >[2011/12/15 11:33:47.404372, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \srvsvc >[2011/12/15 11:33:47.406412, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.406494, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.406555, 3] smbd/process.c:1661(process_smb) > Transaction 8 of length 140 (0 toread) >[2011/12/15 11:33:47.406615, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.406650, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=512 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8550 (0x2166) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.407288, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. > [0030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.407548, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.407610, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.407670, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 2166 name: srvsvc len: 72 >[2011/12/15 11:33:47.407732, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.407793, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.407852, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.407913, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.407974, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.408033, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.408092, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.408154, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.408213, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.408272, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.408333, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.408398, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 4b324fc8-1670-01d3-1278-5a47bf6ee188 > if_version : 0x00000003 (3) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.409291, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.409352, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.409413, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.409477, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \srvsvc >[2011/12/15 11:33:47.409539, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.409614, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\srvsvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.410462, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.410537, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.412839, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.412909, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.412969, 3] smbd/process.c:1661(process_smb) > Transaction 9 of length 63 (0 toread) >[2011/12/15 11:33:47.413045, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.413082, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=576 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8550 (0x2166) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.413680, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.413718, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.413781, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.413842, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.413905, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.413968, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.414039, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.414101, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.417771, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.417843, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.417903, 3] smbd/process.c:1661(process_smb) > Transaction 10 of length 168 (0 toread) >[2011/12/15 11:33:47.417963, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.417998, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=640 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8550 (0x2166) > smb_bcc=97 >[2011/12/15 11:33:47.418694, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 15 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 65 00 00 ...c.o.m .....e.. > [0060] 00 . >[2011/12/15 11:33:47.419039, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.419100, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.419164, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.419227, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.419286, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.419346, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.419405, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "srvsvc" (pnum 2166) >[2011/12/15 11:33:47.419465, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.419526, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.419604, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.419664, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.419724, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.419785, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.419844, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.419903, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.419964, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.420024, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.420083, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.420143, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.420208, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0015 (21) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 65 00 00 00 ....e... >[2011/12/15 11:33:47.421062, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.421122, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.421182, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\srvsvc >[2011/12/15 11:33:47.421243, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \srvsvc op 0x15 - api_rpcTNP: rpc command: SRVSVC_NETSRVGETINFO >[2011/12/15 11:33:47.421310, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[21].fn == 0x3d391a >[2011/12/15 11:33:47.421383, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > in: struct srvsvc_NetSrvGetInfo > server_unc : * > server_unc : '\\rock.dwide.com' > level : 0x00000065 (101) >[2011/12/15 11:33:47.421567, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1125(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1125 >[2011/12/15 11:33:47.421636, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1203(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1203 >[2011/12/15 11:33:47.421697, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > out: struct srvsvc_NetSrvGetInfo > info : * > info : union srvsvc_NetSrvInfo(case 101) > info101 : * > info101: struct srvsvc_NetSrvInfo101 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > server_type : 0x00809a03 (8428035) > 1: SV_TYPE_WORKSTATION > 1: SV_TYPE_SERVER > 0: SV_TYPE_SQLSERVER > 0: SV_TYPE_DOMAIN_CTRL > 0: SV_TYPE_DOMAIN_BAKCTRL > 0: SV_TYPE_TIME_SOURCE > 0: SV_TYPE_AFP > 0: SV_TYPE_NOVELL > 0: SV_TYPE_DOMAIN_MEMBER > 1: SV_TYPE_PRINTQ_SERVER > 0: SV_TYPE_DIALIN_SERVER > 1: SV_TYPE_SERVER_UNIX > 1: SV_TYPE_NT > 0: SV_TYPE_WFW > 0: SV_TYPE_SERVER_MFPN > 1: SV_TYPE_SERVER_NT > 0: SV_TYPE_POTENTIAL_BROWSER > 0: SV_TYPE_BACKUP_BROWSER > 0: SV_TYPE_MASTER_BROWSER > 0: SV_TYPE_DOMAIN_MASTER > 0: SV_TYPE_SERVER_OSF > 0: SV_TYPE_SERVER_VMS > 0: SV_TYPE_WIN95_PLUS > 1: SV_TYPE_DFS_SERVER > 0: SV_TYPE_ALTERNATE_XPORT > 0: SV_TYPE_LOCAL_LIST_ONLY > 0: SV_TYPE_DOMAIN_ENUM > comment : * > comment : 'Samba 3.6.1' > result : WERR_OK >[2011/12/15 11:33:47.422946, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \srvsvc successfully >[2011/12/15 11:33:47.423011, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.423087, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.423150, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 96. >[2011/12/15 11:33:47.423219, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0078 (120) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000060 (96) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=96 > [0000] 65 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 e....... ........ > [0010] 04 00 00 00 09 00 00 00 03 9A 80 00 0C 00 02 00 ........ ........ > [0020] 05 00 00 00 00 00 00 00 05 00 00 00 52 00 4F 00 ........ ....R.O. > [0030] 43 00 4B 00 00 00 00 00 0C 00 00 00 00 00 00 00 C.K..... ........ > [0040] 0C 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 ....S.a. m.b.a. . > [0050] 33 00 2E 00 36 00 2E 00 31 00 00 00 00 00 00 00 3...6... 1....... >[2011/12/15 11:33:47.424159, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 48 >[2011/12/15 11:33:47.424232, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 120 bytes. There is no more data outstanding >[2011/12/15 11:33:47.424295, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..120] (align 0) >[2011/12/15 11:33:47.424356, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.424392, 5] lib/util.c:342(show_msg) > size=176 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=640 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2011/12/15 11:33:47.424940, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 78 00 00 00 01 00 00 ........ .x...... > [0010] 00 60 00 00 00 00 00 00 00 65 00 00 00 04 00 02 .`...... .e...... > [0020] 00 F4 01 00 00 08 00 02 00 04 00 00 00 09 00 00 ........ ........ > [0030] 00 03 9A 80 00 0C 00 02 00 05 00 00 00 00 00 00 ........ ........ > [0040] 00 05 00 00 00 52 00 4F 00 43 00 4B 00 00 00 00 .....R.O .C.K.... > [0050] 00 0C 00 00 00 00 00 00 00 0C 00 00 00 53 00 61 ........ .....S.a > [0060] 00 6D 00 62 00 61 00 20 00 33 00 2E 00 36 00 2E .m.b.a. .3...6.. > [0070] 00 31 00 00 00 00 00 00 00 .1...... . >[2011/12/15 11:33:47.428566, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.428638, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.428698, 3] smbd/process.c:1661(process_smb) > Transaction 11 of length 45 (0 toread) >[2011/12/15 11:33:47.428758, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.428794, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=704 > smt_wct=3 > smb_vwv[ 0]= 8550 (0x2166) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.429175, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.429213, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.429275, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.429334, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8550 (numopen=1) >[2011/12/15 11:33:47.429396, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.429467, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \srvsvc >[2011/12/15 11:33:47.429533, 5] smbd/files.c:464(file_free) > freed files structure 8550 (0 used) >[2011/12/15 11:33:47.429596, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.429632, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=704 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.429944, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.433468, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.433556, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.433616, 3] smbd/process.c:1661(process_smb) > Transaction 12 of length 104 (0 toread) >[2011/12/15 11:33:47.433676, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.433711, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=768 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 256 (0x100) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.434594, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 77 00 6B 00 73 00 73 00 76 00 63 00 00 .\.w.k.s .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.434713, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.434775, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.434837, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = wkssvc >[2011/12/15 11:33:47.434903, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \wkssvc. >[2011/12/15 11:33:47.434966, 5] smbd/files.c:126(file_new) > allocated file structure 4455, fnum = 8551 (1 used) >[2011/12/15 11:33:47.435033, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/wkssvc hash 0x2b4dd005 >[2011/12/15 11:33:47.435100, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \wkssvc >[2011/12/15 11:33:47.435167, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \wkssvc >[2011/12/15 11:33:47.435229, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \wkssvc >[2011/12/15 11:33:47.435297, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \wkssvc (pipes_open=0) >[2011/12/15 11:33:47.435360, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \wkssvc >[2011/12/15 11:33:47.438761, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.438832, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.438892, 3] smbd/process.c:1661(process_smb) > Transaction 13 of length 140 (0 toread) >[2011/12/15 11:33:47.438952, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.438987, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=832 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8551 (0x2167) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.439623, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 98 D0 FF 6B 12 A1 10 36 98 33 46 C3 F8 7E 34 ....k... 6.3F..~4 > [0030] 5A 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 Z.....]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.439900, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.439963, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.440023, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 2167 name: wkssvc len: 72 >[2011/12/15 11:33:47.440084, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.440146, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.440205, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.440265, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.440326, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.440385, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.440444, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.440506, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.440565, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.440624, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.440685, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.440750, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 6bffd098-a112-3610-9833-46c3f87e345a > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.441623, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.441684, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.441761, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.441821, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \wkssvc >[2011/12/15 11:33:47.441883, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.441957, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\wkssvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.442810, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.442886, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.445161, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.445231, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.445291, 3] smbd/process.c:1661(process_smb) > Transaction 14 of length 63 (0 toread) >[2011/12/15 11:33:47.445351, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.445386, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=896 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8551 (0x2167) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.446075, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.446135, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.446211, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.446291, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.446366, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.446461, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.446556, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.446630, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.450305, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.450477, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.450551, 3] smbd/process.c:1661(process_smb) > Transaction 15 of length 168 (0 toread) >[2011/12/15 11:33:47.450623, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.450666, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=960 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8551 (0x2167) > smb_bcc=97 >[2011/12/15 11:33:47.451479, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 00 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 64 00 00 ...c.o.m .....d.. > [0060] 00 . >[2011/12/15 11:33:47.451988, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.452079, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.452162, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.452239, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.452310, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.452381, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.452451, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "wkssvc" (pnum 2167) >[2011/12/15 11:33:47.452525, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.452599, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.452674, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.452745, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.452818, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.452891, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.452961, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.453031, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.453106, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.453176, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.453246, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.453319, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.453402, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0000 (0) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 64 00 00 00 ....d... >[2011/12/15 11:33:47.454570, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.454663, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.454737, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\wkssvc >[2011/12/15 11:33:47.454816, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO >[2011/12/15 11:33:47.454892, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[0].fn == 0x3a14b2 >[2011/12/15 11:33:47.454972, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > in: struct wkssvc_NetWkstaGetInfo > server_name : * > server_name : '\\rock.dwide.com' > level : 0x00000064 (100) >[2011/12/15 11:33:47.455186, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > out: struct wkssvc_NetWkstaGetInfo > info : * > info : union wkssvc_NetWkstaInfo(case 100) > info100 : * > info100: struct wkssvc_NetWkstaInfo100 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > domain_name : * > domain_name : 'TEST' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > result : WERR_OK >[2011/12/15 11:33:47.455719, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \wkssvc successfully >[2011/12/15 11:33:47.455815, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.455919, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.455995, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 80. >[2011/12/15 11:33:47.456081, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0068 (104) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000050 (80) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=80 > [0000] 64 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 d....... ........ > [0010] 0C 00 02 00 04 00 00 00 09 00 00 00 05 00 00 00 ........ ........ > [0020] 00 00 00 00 05 00 00 00 52 00 4F 00 43 00 4B 00 ........ R.O.C.K. > [0030] 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 00 ........ ........ > [0040] 54 00 45 00 53 00 54 00 00 00 00 00 00 00 00 00 T.E.S.T. ........ >[2011/12/15 11:33:47.457254, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 54 >[2011/12/15 11:33:47.457374, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 104 bytes. There is no more data outstanding >[2011/12/15 11:33:47.457453, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..104] (align 0) >[2011/12/15 11:33:47.457529, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.457572, 5] lib/util.c:342(show_msg) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=960 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:47.458224, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h...... > [0010] 00 50 00 00 00 00 00 00 00 64 00 00 00 04 00 02 .P...... .d...... > [0020] 00 F4 01 00 00 08 00 02 00 0C 00 02 00 04 00 00 ........ ........ > [0030] 00 09 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ > [0040] 00 52 00 4F 00 43 00 4B 00 00 00 00 00 05 00 00 .R.O.C.K ........ > [0050] 00 00 00 00 00 05 00 00 00 54 00 45 00 53 00 54 ........ .T.E.S.T > [0060] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:47.460967, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.461123, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.461197, 3] smbd/process.c:1661(process_smb) > Transaction 16 of length 45 (0 toread) >[2011/12/15 11:33:47.461269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.461311, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1024 > smt_wct=3 > smb_vwv[ 0]= 8551 (0x2167) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.461771, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.461832, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.461907, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.461981, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8551 (numopen=1) >[2011/12/15 11:33:47.462055, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.462144, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \wkssvc >[2011/12/15 11:33:47.462230, 5] smbd/files.c:464(file_free) > freed files structure 8551 (0 used) >[2011/12/15 11:33:47.462338, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.462382, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1024 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.462777, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.468858, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.469011, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.469084, 3] smbd/process.c:1661(process_smb) > Transaction 17 of length 104 (0 toread) >[2011/12/15 11:33:47.469156, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.469199, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1088 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.470244, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.470428, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.470522, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.470603, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = srvsvc >[2011/12/15 11:33:47.470684, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \srvsvc. >[2011/12/15 11:33:47.470763, 5] smbd/files.c:126(file_new) > allocated file structure 4456, fnum = 8552 (1 used) >[2011/12/15 11:33:47.470845, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/srvsvc hash 0x8e98a76a >[2011/12/15 11:33:47.470929, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \srvsvc >[2011/12/15 11:33:47.471014, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \srvsvc >[2011/12/15 11:33:47.471088, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \srvsvc >[2011/12/15 11:33:47.471174, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \srvsvc (pipes_open=0) >[2011/12/15 11:33:47.471252, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \srvsvc >[2011/12/15 11:33:47.474059, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.474189, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.474250, 3] smbd/process.c:1661(process_smb) > Transaction 18 of length 140 (0 toread) >[2011/12/15 11:33:47.474310, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.474346, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1152 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8552 (0x2168) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.475031, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. > [0030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.475295, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.475358, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.475421, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 2168 name: srvsvc len: 72 >[2011/12/15 11:33:47.475484, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.475547, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.475607, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.475667, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.475728, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.475788, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.475847, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.475909, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.475969, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.476027, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.476089, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.476158, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 4b324fc8-1670-01d3-1278-5a47bf6ee188 > if_version : 0x00000003 (3) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.477053, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.477115, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.477176, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.477236, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \srvsvc >[2011/12/15 11:33:47.477299, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.477375, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\srvsvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.478221, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.478299, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.480557, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.480627, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.480687, 3] smbd/process.c:1661(process_smb) > Transaction 19 of length 63 (0 toread) >[2011/12/15 11:33:47.480747, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.480783, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1216 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8552 (0x2168) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.481374, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.481412, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.481479, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.481543, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.481605, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.481688, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.481760, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.481822, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.484159, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:47.484229, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:47.484289, 3] smbd/process.c:1661(process_smb) > Transaction 20 of length 192 (0 toread) >[2011/12/15 11:33:47.484349, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.484385, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1280 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 104 (0x68) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8552 (0x2168) > smb_bcc=121 >[2011/12/15 11:33:47.485067, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h...... > [0020] 00 50 00 00 00 00 00 0F 00 00 00 02 00 11 00 00 .P...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 01 00 00 ...c.o.m ........ > [0060] 00 01 00 00 00 04 00 02 00 00 00 00 00 00 00 00 ........ ........ > [0070] 00 FF FF FF FF 00 00 00 00 ........ . >[2011/12/15 11:33:47.485469, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.485541, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.485608, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=104 params=0 setup=2 >[2011/12/15 11:33:47.485672, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.485731, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.485791, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.485849, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "srvsvc" (pnum 2168) >[2011/12/15 11:33:47.485910, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.485971, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 104 >[2011/12/15 11:33:47.486033, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 104 >[2011/12/15 11:33:47.486092, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 104 >[2011/12/15 11:33:47.486152, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.486213, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.486272, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 88 >[2011/12/15 11:33:47.486332, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 88 >[2011/12/15 11:33:47.486393, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.486483, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 88 >[2011/12/15 11:33:47.486544, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 88, incoming data = 88 >[2011/12/15 11:33:47.486605, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.486670, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0068 (104) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000050 (80) > context_id : 0x0000 (0) > opnum : 0x000f (15) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=80 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 01 00 00 00 01 00 00 00 04 00 02 00 ........ ........ > [0040] 00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ........ ........ >[2011/12/15 11:33:47.487584, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.487644, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.487704, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\srvsvc >[2011/12/15 11:33:47.487766, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \srvsvc op 0xf - api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL >[2011/12/15 11:33:47.487830, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[15].fn == 0x3d47ac >[2011/12/15 11:33:47.487917, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll > in: struct srvsvc_NetShareEnumAll > server_unc : * > server_unc : '\\rock.dwide.com' > info_ctr : * > info_ctr: struct srvsvc_NetShareInfoCtr > level : 0x00000001 (1) > ctr : union srvsvc_NetShareCtr(case 1) > ctr1 : * > ctr1: struct srvsvc_NetShareCtr1 > count : 0x00000000 (0) > array : NULL > max_buffer : 0xffffffff (4294967295) > resume_handle : NULL >[2011/12/15 11:33:47.488351, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1381(_srvsvc_NetShareEnumAll) > _srvsvc_NetShareEnumAll: 1381 >[2011/12/15 11:33:47.488416, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:567(init_srv_share_info_ctr) > init_srv_share_info_ctr >[2011/12/15 11:33:47.488477, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.488541, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.488602, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.488663, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.488739, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.488848, 8] smbd/service.c:248(load_registry_shares) > load_registry_shares() >[2011/12/15 11:33:47.488919, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.488983, 10] rpc_server/srvsvc/srv_srvsvc_nt.c:590(init_srv_share_info_ctr) > NOT counting service homes >[2011/12/15 11:33:47.489047, 10] rpc_server/srvsvc/srv_srvsvc_nt.c:585(init_srv_share_info_ctr) > counting service public >[2011/12/15 11:33:47.489110, 10] rpc_server/srvsvc/srv_srvsvc_nt.c:585(init_srv_share_info_ctr) > counting service IPC$ >[2011/12/15 11:33:47.489186, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1395(_srvsvc_NetShareEnumAll) > _srvsvc_NetShareEnumAll: 1395 >[2011/12/15 11:33:47.489247, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll > out: struct srvsvc_NetShareEnumAll > info_ctr : * > info_ctr: struct srvsvc_NetShareInfoCtr > level : 0x00000001 (1) > ctr : union srvsvc_NetShareCtr(case 1) > ctr1 : * > ctr1: struct srvsvc_NetShareCtr1 > count : 0x00000002 (2) > array : * > array: ARRAY(2) > array: struct srvsvc_NetShareInfo1 > name : * > name : 'public' > type : STYPE_DISKTREE (0x0) > comment : * > comment : '' > array: struct srvsvc_NetShareInfo1 > name : * > name : 'IPC$' > type : STYPE_IPC_HIDDEN (0x80000003) > comment : * > comment : 'IPC Service (Samba 3.6.1)' > totalentries : * > totalentries : 0x00000002 (2) > resume_handle : NULL > result : WERR_OK >[2011/12/15 11:33:47.490063, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \srvsvc successfully >[2011/12/15 11:33:47.490128, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 88 >[2011/12/15 11:33:47.490206, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.490269, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 192. >[2011/12/15 11:33:47.490338, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x00d8 (216) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x000000c0 (192) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=192 > [0000] 01 00 00 00 01 00 00 00 08 00 02 00 02 00 00 00 ........ ........ > [0010] 0C 00 02 00 02 00 00 00 10 00 02 00 00 00 00 00 ........ ........ > [0020] 14 00 02 00 18 00 02 00 03 00 00 80 1C 00 02 00 ........ ........ > [0030] 07 00 00 00 00 00 00 00 07 00 00 00 70 00 75 00 ........ ....p.u. > [0040] 62 00 6C 00 69 00 63 00 00 00 00 00 01 00 00 00 b.l.i.c. ........ > [0050] 00 00 00 00 01 00 00 00 00 00 00 00 05 00 00 00 ........ ........ > [0060] 00 00 00 00 05 00 00 00 49 00 50 00 43 00 24 00 ........ I.P.C.$. > [0070] 00 00 00 00 1A 00 00 00 00 00 00 00 1A 00 00 00 ........ ........ > [0080] 49 00 50 00 43 00 20 00 53 00 65 00 72 00 76 00 I.P.C. . S.e.r.v. > [0090] 69 00 63 00 65 00 20 00 28 00 53 00 61 00 6D 00 i.c.e. . (.S.a.m. > [00A0] 62 00 61 00 20 00 33 00 2E 00 36 00 2E 00 31 00 b.a. .3. ..6...1. > [00B0] 29 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 )....... ........ >[2011/12/15 11:33:47.491657, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 113 >[2011/12/15 11:33:47.491732, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 216 bytes. There is no more data outstanding >[2011/12/15 11:33:47.491795, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..216] (align 0) >[2011/12/15 11:33:47.491857, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.491892, 5] lib/util.c:342(show_msg) > size=272 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1280 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 216 (0xD8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 216 (0xD8) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=217 >[2011/12/15 11:33:47.492441, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 D8 00 00 00 01 00 00 ........ ........ > [0010] 00 C0 00 00 00 00 00 00 00 01 00 00 00 01 00 00 ........ ........ > [0020] 00 08 00 02 00 02 00 00 00 0C 00 02 00 02 00 00 ........ ........ > [0030] 00 10 00 02 00 00 00 00 00 14 00 02 00 18 00 02 ........ ........ > [0040] 00 03 00 00 80 1C 00 02 00 07 00 00 00 00 00 00 ........ ........ > [0050] 00 07 00 00 00 70 00 75 00 62 00 6C 00 69 00 63 .....p.u .b.l.i.c > [0060] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ > [0070] 00 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ > [0080] 00 49 00 50 00 43 00 24 00 00 00 00 00 1A 00 00 .I.P.C.$ ........ > [0090] 00 00 00 00 00 1A 00 00 00 49 00 50 00 43 00 20 ........ .I.P.C. > [00A0] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [00B0] 00 28 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 .(.S.a.m .b.a. .3 > [00C0] 00 2E 00 36 00 2E 00 31 00 29 00 00 00 02 00 00 ...6...1 .)...... > [00D0] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:47.496240, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.496313, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.496373, 3] smbd/process.c:1661(process_smb) > Transaction 21 of length 45 (0 toread) >[2011/12/15 11:33:47.496433, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.496469, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1344 > smt_wct=3 > smb_vwv[ 0]= 8552 (0x2168) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.496871, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.496909, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.496971, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.497031, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8552 (numopen=1) >[2011/12/15 11:33:47.497093, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.497168, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \srvsvc >[2011/12/15 11:33:47.497246, 5] smbd/files.c:464(file_free) > freed files structure 8552 (0 used) >[2011/12/15 11:33:47.497309, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.497346, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1344 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.497664, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.507835, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 102 >[2011/12/15 11:33:47.507908, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x66 >[2011/12/15 11:33:47.507969, 3] smbd/process.c:1661(process_smb) > Transaction 22 of length 106 (0 toread) >[2011/12/15 11:33:47.508028, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.508064, 5] lib/util.c:342(show_msg) > size=102 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=1996 > smb_uid=0 > smb_mid=1408 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 4096 (0x1000) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=19 >[2011/12/15 11:33:47.508936, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 73 00 70 00 6F 00 6F 00 6C 00 73 00 73 .\.s.p.o .o.l.s.s > [0010] 00 00 00 ... >[2011/12/15 11:33:47.509056, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.509118, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.509182, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = spoolss >[2011/12/15 11:33:47.509248, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \spoolss. >[2011/12/15 11:33:47.509312, 5] smbd/files.c:126(file_new) > allocated file structure 4457, fnum = 8553 (1 used) >[2011/12/15 11:33:47.509380, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/spoolss hash 0x7d4e46e5 >[2011/12/15 11:33:47.509448, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \spoolss >[2011/12/15 11:33:47.509522, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \spoolss >[2011/12/15 11:33:47.509583, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \spoolss >[2011/12/15 11:33:47.509652, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \spoolss (pipes_open=0) >[2011/12/15 11:33:47.509716, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \spoolss >[2011/12/15 11:33:47.511754, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.511826, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.511886, 3] smbd/process.c:1661(process_smb) > Transaction 23 of length 140 (0 toread) >[2011/12/15 11:33:47.511946, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.511981, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1472 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8553 (0x2169) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.512646, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 89 .xV4.4.. ....#Eg. > [0030] AB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.512913, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.512975, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.513035, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 2169 name: spoolss len: 72 >[2011/12/15 11:33:47.513097, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.513159, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.513218, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.513278, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.513339, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.513398, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.513462, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.513525, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.513584, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.513643, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.513704, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.513770, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 12345678-1234-abcd-ef00-0123456789ab > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.514678, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.514740, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss >[2011/12/15 11:33:47.514801, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.514861, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \spoolss >[2011/12/15 11:33:47.514922, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\spoolss -> \PIPE\spoolss >[2011/12/15 11:33:47.514997, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000e (14) > secondary_address : '\PIPE\spoolss' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.515836, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.515911, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.518152, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.518223, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.518283, 3] smbd/process.c:1661(process_smb) > Transaction 24 of length 63 (0 toread) >[2011/12/15 11:33:47.518343, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.518379, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1536 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8553 (0x2169) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.519001, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.519040, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.519102, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.519164, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \spoolss len: 1024 >[2011/12/15 11:33:47.519227, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \spoolss: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.519290, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 25 >[2011/12/15 11:33:47.519362, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.519424, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.521835, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 266 >[2011/12/15 11:33:47.521907, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x10a >[2011/12/15 11:33:47.521967, 3] smbd/process.c:1661(process_smb) > Transaction 25 of length 270 (0 toread) >[2011/12/15 11:33:47.522027, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.522062, 5] lib/util.c:342(show_msg) > size=266 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=1996 > smb_uid=0 > smb_mid=1600 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 182 (0xB6) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 182 (0xB6) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8553 (0x2169) > smb_bcc=199 >[2011/12/15 11:33:47.522758, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 B6 00 00 00 01 00 00 ........ ........ > [0020] 00 9E 00 00 00 00 00 45 00 00 00 02 00 11 00 00 .......E ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 00 00 00 ...c.o.m ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ > [0070] 00 01 00 00 00 04 00 02 00 1C 00 00 00 08 00 02 ........ ........ > [0080] 00 0C 00 02 00 28 0A 00 00 03 00 00 00 00 00 00 .....(.. ........ > [0090] 00 00 00 00 00 09 00 00 00 00 00 00 00 09 00 00 ........ ........ > [00A0] 00 5C 00 5C 00 44 00 4D 00 54 00 45 00 53 00 54 .\.\.D.M .T.E.S.T > [00B0] 00 00 00 00 00 03 00 00 00 00 00 00 00 03 00 00 ........ ........ > [00C0] 00 64 00 6D 00 00 00 .d.m... >[2011/12/15 11:33:47.523397, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.523459, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.523523, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=182 params=0 setup=2 >[2011/12/15 11:33:47.523586, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.523645, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.523704, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.523763, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "spoolss" (pnum 2169) >[2011/12/15 11:33:47.523823, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.523903, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 182 >[2011/12/15 11:33:47.523964, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 182 >[2011/12/15 11:33:47.524023, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 182 >[2011/12/15 11:33:47.524084, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 182, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.524145, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.524204, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 166 >[2011/12/15 11:33:47.524263, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 166 >[2011/12/15 11:33:47.524325, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.524384, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 166 >[2011/12/15 11:33:47.524443, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 166, incoming data = 166 >[2011/12/15 11:33:47.524504, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.524569, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x00b6 (182) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x0000009e (158) > context_id : 0x0000 (0) > opnum : 0x0045 (69) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=158 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0040] 00 00 00 00 01 00 00 00 01 00 00 00 04 00 02 00 ........ ........ > [0050] 1C 00 00 00 08 00 02 00 0C 00 02 00 28 0A 00 00 ........ ....(... > [0060] 03 00 00 00 00 00 00 00 00 00 00 00 09 00 00 00 ........ ........ > [0070] 00 00 00 00 09 00 00 00 5C 00 5C 00 44 00 4D 00 ........ \.\.D.M. > [0080] 54 00 45 00 53 00 54 00 00 00 00 00 03 00 00 00 T.E.S.T. ........ > [0090] 00 00 00 00 03 00 00 00 64 00 6D 00 00 00 ........ d.m... >[2011/12/15 11:33:47.525803, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.525863, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.525923, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\spoolss >[2011/12/15 11:33:47.525985, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX >[2011/12/15 11:33:47.526053, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[69].fn == 0x3f1503 >[2011/12/15 11:33:47.526163, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx > in: struct spoolss_OpenPrinterEx > printername : * > printername : '\\rock.dwide.com' > datatype : NULL > devmode_ctr: struct spoolss_DevmodeContainer > _ndr_size : 0x00000000 (0) > devmode : NULL > access_mask : 0x00000000 (0) > 0: SERVER_ACCESS_ADMINISTER > 0: SERVER_ACCESS_ENUMERATE > 0: PRINTER_ACCESS_ADMINISTER > 0: PRINTER_ACCESS_USE > 0: JOB_ACCESS_ADMINISTER > 0: JOB_ACCESS_READ > level : 0x00000001 (1) > userlevel : union spoolss_UserLevel(case 1) > level1 : * > level1: struct spoolss_UserLevel1 > size : 0x0000001c (28) > client : * > client : '\\DMTEST' > user : * > user : 'dm' > build : 0x00000a28 (2600) > major : UNKNOWN_ENUM_VALUE (3) > minor : SPOOLSS_MINOR_VERSION_0 (0) > processor : PROCESSOR_ARCHITECTURE_INTEL (0) > checking name: \\rock.dwide.com >[2011/12/15 11:33:47.527019, 10] rpc_server/spoolss/srv_spoolss_nt.c:751(open_printer_hnd) > open_printer_hnd: name [\\rock.dwide.com] >[2011/12/15 11:33:47.527089, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.527212, 3] rpc_server/spoolss/srv_spoolss_nt.c:520(set_printer_hnd_printertype) > Setting printer type=\\rock.dwide.com > Printer is a print server >[2011/12/15 11:33:47.527298, 4] rpc_server/spoolss/srv_spoolss_nt.c:580(set_printer_hnd_name) > Setting printer name=\\rock.dwide.com (len=16) >[2011/12/15 11:33:47.527365, 8] lib/util.c:1521(is_myname) > is_myname("rock.dwide.com") returns 0 >[2011/12/15 11:33:47.527849, 5] rpc_server/spoolss/srv_spoolss_nt.c:787(open_printer_hnd) > 1 printer handles active >[2011/12/15 11:33:47.527918, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.528041, 4] rpc_server/spoolss/srv_spoolss_nt.c:1851(_spoolss_OpenPrinterEx) > Setting print server access = SERVER_ACCESS_ENUMERATE >[2011/12/15 11:33:47.528108, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx > out: struct spoolss_OpenPrinterEx > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-e94e-dba2be730000 > result : WERR_OK >[2011/12/15 11:33:47.528350, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \spoolss successfully >[2011/12/15 11:33:47.528416, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 166 >[2011/12/15 11:33:47.528493, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \spoolss len: 1024 >[2011/12/15 11:33:47.528558, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. >[2011/12/15 11:33:47.528628, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 00 00 00 00 .s...... >[2011/12/15 11:33:47.529329, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 25 >[2011/12/15 11:33:47.529402, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2011/12/15 11:33:47.529470, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..48] (align 0) >[2011/12/15 11:33:47.529533, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.529569, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=1996 > smb_uid=0 > smb_mid=1600 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2011/12/15 11:33:47.530117, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 01 00 00 ........ .0...... > [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 0D 00 00 ........ ........ > [0020] 00 00 00 00 00 E9 4E DB A2 BE 73 00 00 00 00 00 ......N. ..s..... > [0030] 00 . >[2011/12/15 11:33:47.533937, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 128 >[2011/12/15 11:33:47.534009, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x80 >[2011/12/15 11:33:47.534070, 3] smbd/process.c:1661(process_smb) > Transaction 26 of length 132 (0 toread) >[2011/12/15 11:33:47.534130, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.534166, 5] lib/util.c:342(show_msg) > size=128 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=1996 > smb_uid=0 > smb_mid=1664 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 44 (0x2C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 44 (0x2C) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8553 (0x2169) > smb_bcc=61 >[2011/12/15 11:33:47.534859, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 02 00 00 ........ .,...... > [0020] 00 14 00 00 00 00 00 1D 00 00 00 00 00 0D 00 00 ........ ........ > [0030] 00 00 00 00 00 E9 4E DB A2 BE 73 00 00 ......N. ..s.. >[2011/12/15 11:33:47.535082, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.535144, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.535225, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=44 params=0 setup=2 >[2011/12/15 11:33:47.535289, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.535348, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.535408, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.535466, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "spoolss" (pnum 2169) >[2011/12/15 11:33:47.535527, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.535588, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 44 >[2011/12/15 11:33:47.535649, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 44 >[2011/12/15 11:33:47.535708, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 44 >[2011/12/15 11:33:47.535768, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.535829, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.535888, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 28 >[2011/12/15 11:33:47.535947, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 28 >[2011/12/15 11:33:47.536009, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.536068, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 28 >[2011/12/15 11:33:47.536127, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 28, incoming data = 28 >[2011/12/15 11:33:47.536188, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.536252, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x002c (44) > auth_length : 0x0000 (0) > call_id : 0x00000002 (2) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000014 (20) > context_id : 0x0000 (0) > opnum : 0x001d (29) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=20 > [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.536978, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.537037, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.537097, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\spoolss >[2011/12/15 11:33:47.537158, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER >[2011/12/15 11:33:47.537221, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[29].fn == 0x3f7651 >[2011/12/15 11:33:47.537290, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > spoolss_ClosePrinter: struct spoolss_ClosePrinter > in: struct spoolss_ClosePrinter > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-e94e-dba2be730000 >[2011/12/15 11:33:47.537522, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.537648, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.537772, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.537893, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:47.537954, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > spoolss_ClosePrinter: struct spoolss_ClosePrinter > out: struct spoolss_ClosePrinter > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:47.538189, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \spoolss successfully >[2011/12/15 11:33:47.538253, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 28 >[2011/12/15 11:33:47.538329, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \spoolss len: 1024 >[2011/12/15 11:33:47.538392, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. >[2011/12/15 11:33:47.538469, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000002 (2) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 00 00 00 00 ........ >[2011/12/15 11:33:47.539148, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 25 >[2011/12/15 11:33:47.539220, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2011/12/15 11:33:47.539283, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..48] (align 0) >[2011/12/15 11:33:47.539344, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.539380, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=1996 > smb_uid=0 > smb_mid=1664 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2011/12/15 11:33:47.539941, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0030] 00 . >[2011/12/15 11:33:47.542014, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.542085, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.542146, 3] smbd/process.c:1661(process_smb) > Transaction 27 of length 45 (0 toread) >[2011/12/15 11:33:47.542205, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.542241, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1728 > smt_wct=3 > smb_vwv[ 0]= 8553 (0x2169) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.542657, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.542697, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.542759, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.542819, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8553 (numopen=1) >[2011/12/15 11:33:47.542880, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.542952, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \spoolss >[2011/12/15 11:33:47.543019, 5] smbd/files.c:464(file_free) > freed files structure 8553 (0 used) >[2011/12/15 11:33:47.543082, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.543118, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1728 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.543430, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.549737, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.549898, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.549971, 3] smbd/process.c:1661(process_smb) > Transaction 28 of length 104 (0 toread) >[2011/12/15 11:33:47.550043, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.550085, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1792 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 256 (0x100) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.551139, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 77 00 6B 00 73 00 73 00 76 00 63 00 00 .\.w.k.s .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.551322, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.551399, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.551514, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = wkssvc >[2011/12/15 11:33:47.551597, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \wkssvc. >[2011/12/15 11:33:47.551677, 5] smbd/files.c:126(file_new) > allocated file structure 4458, fnum = 8554 (1 used) >[2011/12/15 11:33:47.551759, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/wkssvc hash 0x2b4dd005 >[2011/12/15 11:33:47.551845, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \wkssvc >[2011/12/15 11:33:47.551931, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \wkssvc >[2011/12/15 11:33:47.552004, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \wkssvc >[2011/12/15 11:33:47.552092, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \wkssvc (pipes_open=0) >[2011/12/15 11:33:47.552171, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \wkssvc >[2011/12/15 11:33:47.554976, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.555133, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.555206, 3] smbd/process.c:1661(process_smb) > Transaction 29 of length 140 (0 toread) >[2011/12/15 11:33:47.555277, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.555320, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1856 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8554 (0x216A) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.556080, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 98 D0 FF 6B 12 A1 10 36 98 33 46 C3 F8 7E 34 ....k... 6.3F..~4 > [0030] 5A 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 Z.....]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.556475, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.556559, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.556635, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 216a name: wkssvc len: 72 >[2011/12/15 11:33:47.556710, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.556786, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.556857, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.556929, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.557003, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.557073, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.557142, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.557248, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.557321, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.557392, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.557468, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.557553, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 6bffd098-a112-3610-9833-46c3f87e345a > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.558795, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.558887, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.558960, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.559031, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \wkssvc >[2011/12/15 11:33:47.559107, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.559214, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\wkssvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.560372, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.560484, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.562806, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.562960, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.563033, 3] smbd/process.c:1661(process_smb) > Transaction 30 of length 63 (0 toread) >[2011/12/15 11:33:47.563104, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.563146, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=1920 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8554 (0x216A) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.563849, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.563916, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.563993, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.564073, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.564151, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.564227, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.564320, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.564394, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.566549, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.566704, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.566776, 3] smbd/process.c:1661(process_smb) > Transaction 31 of length 168 (0 toread) >[2011/12/15 11:33:47.566847, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.566890, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1984 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8554 (0x216A) > smb_bcc=97 >[2011/12/15 11:33:47.567699, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 00 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 64 00 00 ...c.o.m .....d.. > [0060] 00 . >[2011/12/15 11:33:47.568239, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.568331, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.568414, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.568490, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.568559, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.568631, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.568701, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "wkssvc" (pnum 216a) >[2011/12/15 11:33:47.568774, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.568849, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.568923, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.568993, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.569065, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.569139, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.569210, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.569280, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.569354, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.569424, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.569496, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.569570, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.569653, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0000 (0) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 64 00 00 00 ....d... >[2011/12/15 11:33:47.570775, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.570868, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.570972, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\wkssvc >[2011/12/15 11:33:47.571051, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO >[2011/12/15 11:33:47.571128, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[0].fn == 0x3a14b2 >[2011/12/15 11:33:47.571216, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > in: struct wkssvc_NetWkstaGetInfo > server_name : * > server_name : '\\rock.dwide.com' > level : 0x00000064 (100) >[2011/12/15 11:33:47.571478, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > out: struct wkssvc_NetWkstaGetInfo > info : * > info : union wkssvc_NetWkstaInfo(case 100) > info100 : * > info100: struct wkssvc_NetWkstaInfo100 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > domain_name : * > domain_name : 'TEST' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > result : WERR_OK >[2011/12/15 11:33:47.572091, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \wkssvc successfully >[2011/12/15 11:33:47.572183, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.572287, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.572363, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 80. >[2011/12/15 11:33:47.572449, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0068 (104) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000050 (80) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=80 > [0000] 64 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 d....... ........ > [0010] 0C 00 02 00 04 00 00 00 09 00 00 00 05 00 00 00 ........ ........ > [0020] 00 00 00 00 05 00 00 00 52 00 4F 00 43 00 4B 00 ........ R.O.C.K. > [0030] 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 00 ........ ........ > [0040] 54 00 45 00 53 00 54 00 00 00 00 00 00 00 00 00 T.E.S.T. ........ >[2011/12/15 11:33:47.573595, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 54 >[2011/12/15 11:33:47.573717, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 104 bytes. There is no more data outstanding >[2011/12/15 11:33:47.573795, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..104] (align 0) >[2011/12/15 11:33:47.573869, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.573946, 5] lib/util.c:342(show_msg) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=1984 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:47.574628, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h...... > [0010] 00 50 00 00 00 00 00 00 00 64 00 00 00 04 00 02 .P...... .d...... > [0020] 00 F4 01 00 00 08 00 02 00 0C 00 02 00 04 00 00 ........ ........ > [0030] 00 09 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ > [0040] 00 52 00 4F 00 43 00 4B 00 00 00 00 00 05 00 00 .R.O.C.K ........ > [0050] 00 00 00 00 00 05 00 00 00 54 00 45 00 53 00 54 ........ .T.E.S.T > [0060] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:47.578533, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.578608, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.578669, 3] smbd/process.c:1661(process_smb) > Transaction 32 of length 45 (0 toread) >[2011/12/15 11:33:47.578729, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.578765, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2048 > smt_wct=3 > smb_vwv[ 0]= 8554 (0x216A) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.579147, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.579187, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.579250, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.579311, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8554 (numopen=1) >[2011/12/15 11:33:47.579373, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.579449, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \wkssvc >[2011/12/15 11:33:47.579519, 5] smbd/files.c:464(file_free) > freed files structure 8554 (0 used) >[2011/12/15 11:33:47.579583, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.579620, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2048 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.579931, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.583345, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.583415, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.583475, 3] smbd/process.c:1661(process_smb) > Transaction 33 of length 104 (0 toread) >[2011/12/15 11:33:47.583535, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.583571, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2112 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.584465, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.584583, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.584645, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.584710, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = srvsvc >[2011/12/15 11:33:47.584777, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \srvsvc. >[2011/12/15 11:33:47.584842, 5] smbd/files.c:126(file_new) > allocated file structure 4459, fnum = 8555 (1 used) >[2011/12/15 11:33:47.584910, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/srvsvc hash 0x8e98a76a >[2011/12/15 11:33:47.584980, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \srvsvc >[2011/12/15 11:33:47.585048, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \srvsvc >[2011/12/15 11:33:47.585110, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \srvsvc >[2011/12/15 11:33:47.585179, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \srvsvc (pipes_open=0) >[2011/12/15 11:33:47.585243, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \srvsvc >[2011/12/15 11:33:47.589669, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.589739, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.589798, 3] smbd/process.c:1661(process_smb) > Transaction 34 of length 140 (0 toread) >[2011/12/15 11:33:47.589858, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.589894, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2176 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8555 (0x216B) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.590545, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. > [0030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.590809, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.590871, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.590932, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 216b name: srvsvc len: 72 >[2011/12/15 11:33:47.590994, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.591055, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.591115, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.591175, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.591254, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.591315, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.591374, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.591436, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.591495, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.591554, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.591615, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.591683, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 4b324fc8-1670-01d3-1278-5a47bf6ee188 > if_version : 0x00000003 (3) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.592568, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.592629, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.592689, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.592749, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \srvsvc >[2011/12/15 11:33:47.592810, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.592887, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\srvsvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.593746, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.593825, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.596158, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.596228, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.596288, 3] smbd/process.c:1661(process_smb) > Transaction 35 of length 63 (0 toread) >[2011/12/15 11:33:47.596348, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.596383, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2240 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8555 (0x216B) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.596975, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.597013, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.597075, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.597137, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.597200, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.597263, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.597335, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.597397, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.601105, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.601176, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.601236, 3] smbd/process.c:1661(process_smb) > Transaction 36 of length 168 (0 toread) >[2011/12/15 11:33:47.601295, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.601331, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2304 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8555 (0x216B) > smb_bcc=97 >[2011/12/15 11:33:47.602020, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 15 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 65 00 00 ...c.o.m .....e.. > [0060] 00 . >[2011/12/15 11:33:47.602394, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.602466, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.602531, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.602595, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.602654, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.602714, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.602773, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "srvsvc" (pnum 216b) >[2011/12/15 11:33:47.602834, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.602895, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.602956, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.603015, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.603076, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.603136, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.603196, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.603255, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.603316, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.603376, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.603435, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.603496, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.603560, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0015 (21) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 65 00 00 00 ....e... >[2011/12/15 11:33:47.604423, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.604483, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.604544, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\srvsvc >[2011/12/15 11:33:47.604606, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \srvsvc op 0x15 - api_rpcTNP: rpc command: SRVSVC_NETSRVGETINFO >[2011/12/15 11:33:47.604669, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[21].fn == 0x3d391a >[2011/12/15 11:33:47.604734, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > in: struct srvsvc_NetSrvGetInfo > server_unc : * > server_unc : '\\rock.dwide.com' > level : 0x00000065 (101) >[2011/12/15 11:33:47.604904, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1125(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1125 >[2011/12/15 11:33:47.604970, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1203(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1203 >[2011/12/15 11:33:47.605031, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > out: struct srvsvc_NetSrvGetInfo > info : * > info : union srvsvc_NetSrvInfo(case 101) > info101 : * > info101: struct srvsvc_NetSrvInfo101 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > server_type : 0x00809a03 (8428035) > 1: SV_TYPE_WORKSTATION > 1: SV_TYPE_SERVER > 0: SV_TYPE_SQLSERVER > 0: SV_TYPE_DOMAIN_CTRL > 0: SV_TYPE_DOMAIN_BAKCTRL > 0: SV_TYPE_TIME_SOURCE > 0: SV_TYPE_AFP > 0: SV_TYPE_NOVELL > 0: SV_TYPE_DOMAIN_MEMBER > 1: SV_TYPE_PRINTQ_SERVER > 0: SV_TYPE_DIALIN_SERVER > 1: SV_TYPE_SERVER_UNIX > 1: SV_TYPE_NT > 0: SV_TYPE_WFW > 0: SV_TYPE_SERVER_MFPN > 1: SV_TYPE_SERVER_NT > 0: SV_TYPE_POTENTIAL_BROWSER > 0: SV_TYPE_BACKUP_BROWSER > 0: SV_TYPE_MASTER_BROWSER > 0: SV_TYPE_DOMAIN_MASTER > 0: SV_TYPE_SERVER_OSF > 0: SV_TYPE_SERVER_VMS > 0: SV_TYPE_WIN95_PLUS > 1: SV_TYPE_DFS_SERVER > 0: SV_TYPE_ALTERNATE_XPORT > 0: SV_TYPE_LOCAL_LIST_ONLY > 0: SV_TYPE_DOMAIN_ENUM > comment : * > comment : 'Samba 3.6.1' > result : WERR_OK >[2011/12/15 11:33:47.606232, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \srvsvc successfully >[2011/12/15 11:33:47.606314, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.606391, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.606463, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 96. >[2011/12/15 11:33:47.606533, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0078 (120) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000060 (96) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=96 > [0000] 65 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 e....... ........ > [0010] 04 00 00 00 09 00 00 00 03 9A 80 00 0C 00 02 00 ........ ........ > [0020] 05 00 00 00 00 00 00 00 05 00 00 00 52 00 4F 00 ........ ....R.O. > [0030] 43 00 4B 00 00 00 00 00 0C 00 00 00 00 00 00 00 C.K..... ........ > [0040] 0C 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 ....S.a. m.b.a. . > [0050] 33 00 2E 00 36 00 2E 00 31 00 00 00 00 00 00 00 3...6... 1....... >[2011/12/15 11:33:47.607461, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 48 >[2011/12/15 11:33:47.607532, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 120 bytes. There is no more data outstanding >[2011/12/15 11:33:47.607596, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..120] (align 0) >[2011/12/15 11:33:47.607657, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.607693, 5] lib/util.c:342(show_msg) > size=176 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2304 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2011/12/15 11:33:47.608239, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 78 00 00 00 01 00 00 ........ .x...... > [0010] 00 60 00 00 00 00 00 00 00 65 00 00 00 04 00 02 .`...... .e...... > [0020] 00 F4 01 00 00 08 00 02 00 04 00 00 00 09 00 00 ........ ........ > [0030] 00 03 9A 80 00 0C 00 02 00 05 00 00 00 00 00 00 ........ ........ > [0040] 00 05 00 00 00 52 00 4F 00 43 00 4B 00 00 00 00 .....R.O .C.K.... > [0050] 00 0C 00 00 00 00 00 00 00 0C 00 00 00 53 00 61 ........ .....S.a > [0060] 00 6D 00 62 00 61 00 20 00 33 00 2E 00 36 00 2E .m.b.a. .3...6.. > [0070] 00 31 00 00 00 00 00 00 00 .1...... . >[2011/12/15 11:33:47.610615, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.610687, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.610747, 3] smbd/process.c:1661(process_smb) > Transaction 37 of length 45 (0 toread) >[2011/12/15 11:33:47.610807, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.610843, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2368 > smt_wct=3 > smb_vwv[ 0]= 8555 (0x216B) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.611242, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.611280, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.611342, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.611402, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8555 (numopen=1) >[2011/12/15 11:33:47.611463, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.611534, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \srvsvc >[2011/12/15 11:33:47.611600, 5] smbd/files.c:464(file_free) > freed files structure 8555 (0 used) >[2011/12/15 11:33:47.611663, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.611699, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2368 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.612011, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.615514, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.615584, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.615644, 3] smbd/process.c:1661(process_smb) > Transaction 38 of length 104 (0 toread) >[2011/12/15 11:33:47.615704, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.615739, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2432 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 256 (0x100) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.616608, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 77 00 6B 00 73 00 73 00 76 00 63 00 00 .\.w.k.s .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.616726, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.616788, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.616850, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = wkssvc >[2011/12/15 11:33:47.616915, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \wkssvc. >[2011/12/15 11:33:47.616978, 5] smbd/files.c:126(file_new) > allocated file structure 4460, fnum = 8556 (1 used) >[2011/12/15 11:33:47.617045, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/wkssvc hash 0x2b4dd005 >[2011/12/15 11:33:47.617112, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \wkssvc >[2011/12/15 11:33:47.617179, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \wkssvc >[2011/12/15 11:33:47.617241, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \wkssvc >[2011/12/15 11:33:47.617308, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \wkssvc (pipes_open=0) >[2011/12/15 11:33:47.617390, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \wkssvc >[2011/12/15 11:33:47.620469, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.620540, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.620599, 3] smbd/process.c:1661(process_smb) > Transaction 39 of length 140 (0 toread) >[2011/12/15 11:33:47.620659, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.620695, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2496 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8556 (0x216C) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.621333, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 98 D0 FF 6B 12 A1 10 36 98 33 46 C3 F8 7E 34 ....k... 6.3F..~4 > [0030] 5A 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 Z.....]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.621596, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.621657, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.621717, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 216c name: wkssvc len: 72 >[2011/12/15 11:33:47.621779, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.621840, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.621899, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.621960, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.622021, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.622080, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.622139, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.622200, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.622259, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.622319, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.622379, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.622456, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 6bffd098-a112-3610-9833-46c3f87e345a > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.623354, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.623415, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.623476, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.623535, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \wkssvc >[2011/12/15 11:33:47.623597, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc >[2011/12/15 11:33:47.623670, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\wkssvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.624503, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.624577, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.626888, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.626960, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.627020, 3] smbd/process.c:1661(process_smb) > Transaction 40 of length 63 (0 toread) >[2011/12/15 11:33:47.627079, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.627115, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2560 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8556 (0x216C) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.627727, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.627765, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.627826, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.627888, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.627950, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.628014, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.628085, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.628147, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.630451, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.630525, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.630585, 3] smbd/process.c:1661(process_smb) > Transaction 41 of length 168 (0 toread) >[2011/12/15 11:33:47.630645, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.630680, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2624 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8556 (0x216C) > smb_bcc=97 >[2011/12/15 11:33:47.631363, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 00 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 64 00 00 ...c.o.m .....d.. > [0060] 00 . >[2011/12/15 11:33:47.631713, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.631775, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.631839, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.631902, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.631961, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.632020, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.632079, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "wkssvc" (pnum 216c) >[2011/12/15 11:33:47.632139, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.632200, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.632261, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.632339, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.632400, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.632460, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.632520, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.632578, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.632640, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.632699, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.632758, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.632818, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.632883, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0000 (0) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 64 00 00 00 ....d... >[2011/12/15 11:33:47.633730, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.633790, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.633850, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\wkssvc >[2011/12/15 11:33:47.633911, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO >[2011/12/15 11:33:47.633974, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[0].fn == 0x3a14b2 >[2011/12/15 11:33:47.634038, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > in: struct wkssvc_NetWkstaGetInfo > server_name : * > server_name : '\\rock.dwide.com' > level : 0x00000064 (100) >[2011/12/15 11:33:47.634211, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo > out: struct wkssvc_NetWkstaGetInfo > info : * > info : union wkssvc_NetWkstaInfo(case 100) > info100 : * > info100: struct wkssvc_NetWkstaInfo100 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > domain_name : * > domain_name : 'TEST' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > result : WERR_OK >[2011/12/15 11:33:47.634657, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \wkssvc successfully >[2011/12/15 11:33:47.634721, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.634796, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \wkssvc len: 1024 >[2011/12/15 11:33:47.634859, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 80. >[2011/12/15 11:33:47.634927, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0068 (104) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000050 (80) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=80 > [0000] 64 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 d....... ........ > [0010] 0C 00 02 00 04 00 00 00 09 00 00 00 05 00 00 00 ........ ........ > [0020] 00 00 00 00 05 00 00 00 52 00 4F 00 43 00 4B 00 ........ R.O.C.K. > [0030] 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 00 ........ ........ > [0040] 54 00 45 00 53 00 54 00 00 00 00 00 00 00 00 00 T.E.S.T. ........ >[2011/12/15 11:33:47.635792, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 54 >[2011/12/15 11:33:47.635864, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 104 bytes. There is no more data outstanding >[2011/12/15 11:33:47.635927, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..104] (align 0) >[2011/12/15 11:33:47.635988, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.636024, 5] lib/util.c:342(show_msg) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2624 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:47.636568, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 68 00 00 00 01 00 00 ........ .h...... > [0010] 00 50 00 00 00 00 00 00 00 64 00 00 00 04 00 02 .P...... .d...... > [0020] 00 F4 01 00 00 08 00 02 00 0C 00 02 00 04 00 00 ........ ........ > [0030] 00 09 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ > [0040] 00 52 00 4F 00 43 00 4B 00 00 00 00 00 05 00 00 .R.O.C.K ........ > [0050] 00 00 00 00 00 05 00 00 00 54 00 45 00 53 00 54 ........ .T.E.S.T > [0060] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:47.639976, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.640051, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.640111, 3] smbd/process.c:1661(process_smb) > Transaction 42 of length 45 (0 toread) >[2011/12/15 11:33:47.640171, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.640207, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2688 > smt_wct=3 > smb_vwv[ 0]= 8556 (0x216C) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.640588, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.640626, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.640688, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.640748, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8556 (numopen=1) >[2011/12/15 11:33:47.640810, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.640881, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \wkssvc >[2011/12/15 11:33:47.640946, 5] smbd/files.c:464(file_free) > freed files structure 8556 (0 used) >[2011/12/15 11:33:47.641008, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.641045, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2688 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.641356, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.644776, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.644855, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.644935, 3] smbd/process.c:1661(process_smb) > Transaction 43 of length 104 (0 toread) >[2011/12/15 11:33:47.645006, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.645049, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2752 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 256 (0x100) > smb_bcc=17 >[2011/12/15 11:33:47.646083, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. > [0010] 00 . >[2011/12/15 11:33:47.646267, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.646344, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.646425, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = srvsvc >[2011/12/15 11:33:47.646527, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \srvsvc. >[2011/12/15 11:33:47.646607, 5] smbd/files.c:126(file_new) > allocated file structure 4461, fnum = 8557 (1 used) >[2011/12/15 11:33:47.646688, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/srvsvc hash 0x8e98a76a >[2011/12/15 11:33:47.646805, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \srvsvc >[2011/12/15 11:33:47.646893, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \srvsvc >[2011/12/15 11:33:47.646966, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \srvsvc >[2011/12/15 11:33:47.647052, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \srvsvc (pipes_open=0) >[2011/12/15 11:33:47.647130, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \srvsvc >[2011/12/15 11:33:47.650239, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.650394, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.650484, 3] smbd/process.c:1661(process_smb) > Transaction 44 of length 140 (0 toread) >[2011/12/15 11:33:47.650556, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.650599, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2816 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8557 (0x216D) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.651360, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. > [0030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.651757, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.651842, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.651917, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 216d name: srvsvc len: 72 >[2011/12/15 11:33:47.651992, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.652067, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.652138, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.652211, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.652284, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.652354, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.652424, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.652503, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.652573, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.652644, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.652717, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.652801, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 4b324fc8-1670-01d3-1278-5a47bf6ee188 > if_version : 0x00000003 (3) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.653928, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.654022, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.654095, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.654167, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \srvsvc >[2011/12/15 11:33:47.654244, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc >[2011/12/15 11:33:47.654343, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\srvsvc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.655398, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.655518, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.658237, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.658423, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.658516, 3] smbd/process.c:1661(process_smb) > Transaction 45 of length 63 (0 toread) >[2011/12/15 11:33:47.658591, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.658641, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=2880 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8557 (0x216D) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.659448, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.659499, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.659574, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.659654, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.659731, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.659808, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.659901, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.659977, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.663482, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 164 >[2011/12/15 11:33:47.663636, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa4 >[2011/12/15 11:33:47.663709, 3] smbd/process.c:1661(process_smb) > Transaction 46 of length 168 (0 toread) >[2011/12/15 11:33:47.663780, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.663823, 5] lib/util.c:342(show_msg) > size=164 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2944 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 80 (0x50) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 80 (0x50) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8557 (0x216D) > smb_bcc=97 >[2011/12/15 11:33:47.664638, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 50 00 00 00 01 00 00 ........ .P...... > [0020] 00 38 00 00 00 00 00 15 00 00 00 02 00 11 00 00 .8...... ........ > [0030] 00 00 00 00 00 11 00 00 00 5C 00 5C 00 72 00 6F ........ .\.\.r.o > [0040] 00 63 00 6B 00 2E 00 64 00 77 00 69 00 64 00 65 .c.k...d .w.i.d.e > [0050] 00 2E 00 63 00 6F 00 6D 00 00 00 00 00 65 00 00 ...c.o.m .....e.. > [0060] 00 . >[2011/12/15 11:33:47.665160, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.665250, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.665333, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=80 params=0 setup=2 >[2011/12/15 11:33:47.665410, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.665482, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.665554, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.665654, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "srvsvc" (pnum 216d) >[2011/12/15 11:33:47.665730, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.665804, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 80 >[2011/12/15 11:33:47.665880, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 80 >[2011/12/15 11:33:47.665951, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 80 >[2011/12/15 11:33:47.666022, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 80, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.666096, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.666166, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.666236, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 64 >[2011/12/15 11:33:47.666310, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.666381, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 64 >[2011/12/15 11:33:47.666473, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 64, incoming data = 64 >[2011/12/15 11:33:47.666548, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.666631, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0050 (80) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000038 (56) > context_id : 0x0000 (0) > opnum : 0x0015 (21) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=56 > [0000] 00 00 02 00 11 00 00 00 00 00 00 00 11 00 00 00 ........ ........ > [0010] 5C 00 5C 00 72 00 6F 00 63 00 6B 00 2E 00 64 00 \.\.r.o. c.k...d. > [0020] 77 00 69 00 64 00 65 00 2E 00 63 00 6F 00 6D 00 w.i.d.e. ..c.o.m. > [0030] 00 00 00 00 65 00 00 00 ....e... >[2011/12/15 11:33:47.667728, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.667820, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.667891, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\srvsvc >[2011/12/15 11:33:47.667969, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \srvsvc op 0x15 - api_rpcTNP: rpc command: SRVSVC_NETSRVGETINFO >[2011/12/15 11:33:47.668045, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[21].fn == 0x3d391a >[2011/12/15 11:33:47.668127, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > in: struct srvsvc_NetSrvGetInfo > server_unc : * > server_unc : '\\rock.dwide.com' > level : 0x00000065 (101) >[2011/12/15 11:33:47.668366, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1125(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1125 >[2011/12/15 11:33:47.668452, 5] rpc_server/srvsvc/srv_srvsvc_nt.c:1203(_srvsvc_NetSrvGetInfo) > _srvsvc_NetSrvGetInfo: 1203 >[2011/12/15 11:33:47.668526, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo > out: struct srvsvc_NetSrvGetInfo > info : * > info : union srvsvc_NetSrvInfo(case 101) > info101 : * > info101: struct srvsvc_NetSrvInfo101 > platform_id : PLATFORM_ID_NT (500) > server_name : * > server_name : 'ROCK' > version_major : 0x00000004 (4) > version_minor : 0x00000009 (9) > server_type : 0x00809a03 (8428035) > 1: SV_TYPE_WORKSTATION > 1: SV_TYPE_SERVER > 0: SV_TYPE_SQLSERVER > 0: SV_TYPE_DOMAIN_CTRL > 0: SV_TYPE_DOMAIN_BAKCTRL > 0: SV_TYPE_TIME_SOURCE > 0: SV_TYPE_AFP > 0: SV_TYPE_NOVELL > 0: SV_TYPE_DOMAIN_MEMBER > 1: SV_TYPE_PRINTQ_SERVER > 0: SV_TYPE_DIALIN_SERVER > 1: SV_TYPE_SERVER_UNIX > 1: SV_TYPE_NT > 0: SV_TYPE_WFW > 0: SV_TYPE_SERVER_MFPN > 1: SV_TYPE_SERVER_NT > 0: SV_TYPE_POTENTIAL_BROWSER > 0: SV_TYPE_BACKUP_BROWSER > 0: SV_TYPE_MASTER_BROWSER > 0: SV_TYPE_DOMAIN_MASTER > 0: SV_TYPE_SERVER_OSF > 0: SV_TYPE_SERVER_VMS > 0: SV_TYPE_WIN95_PLUS > 1: SV_TYPE_DFS_SERVER > 0: SV_TYPE_ALTERNATE_XPORT > 0: SV_TYPE_LOCAL_LIST_ONLY > 0: SV_TYPE_DOMAIN_ENUM > comment : * > comment : 'Samba 3.6.1' > result : WERR_OK >[2011/12/15 11:33:47.670019, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \srvsvc successfully >[2011/12/15 11:33:47.670120, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 64 >[2011/12/15 11:33:47.670225, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \srvsvc len: 1024 >[2011/12/15 11:33:47.670302, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 96. >[2011/12/15 11:33:47.670387, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0078 (120) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000060 (96) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=96 > [0000] 65 00 00 00 04 00 02 00 F4 01 00 00 08 00 02 00 e....... ........ > [0010] 04 00 00 00 09 00 00 00 03 9A 80 00 0C 00 02 00 ........ ........ > [0020] 05 00 00 00 00 00 00 00 05 00 00 00 52 00 4F 00 ........ ....R.O. > [0030] 43 00 4B 00 00 00 00 00 0C 00 00 00 00 00 00 00 C.K..... ........ > [0040] 0C 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 ....S.a. m.b.a. . > [0050] 33 00 2E 00 36 00 2E 00 31 00 00 00 00 00 00 00 3...6... 1....... >[2011/12/15 11:33:47.671679, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 48 >[2011/12/15 11:33:47.671800, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 120 bytes. There is no more data outstanding >[2011/12/15 11:33:47.671878, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..120] (align 0) >[2011/12/15 11:33:47.671952, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.671995, 5] lib/util.c:342(show_msg) > size=176 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=2944 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=121 >[2011/12/15 11:33:47.672646, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 78 00 00 00 01 00 00 ........ .x...... > [0010] 00 60 00 00 00 00 00 00 00 65 00 00 00 04 00 02 .`...... .e...... > [0020] 00 F4 01 00 00 08 00 02 00 04 00 00 00 09 00 00 ........ ........ > [0030] 00 03 9A 80 00 0C 00 02 00 05 00 00 00 00 00 00 ........ ........ > [0040] 00 05 00 00 00 52 00 4F 00 43 00 4B 00 00 00 00 .....R.O .C.K.... > [0050] 00 0C 00 00 00 00 00 00 00 0C 00 00 00 53 00 61 ........ .....S.a > [0060] 00 6D 00 62 00 61 00 20 00 33 00 2E 00 36 00 2E .m.b.a. .3...6.. > [0070] 00 31 00 00 00 00 00 00 00 .1...... . >[2011/12/15 11:33:47.675381, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.675466, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.675526, 3] smbd/process.c:1661(process_smb) > Transaction 47 of length 45 (0 toread) >[2011/12/15 11:33:47.675586, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.675622, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3008 > smt_wct=3 > smb_vwv[ 0]= 8557 (0x216D) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.676005, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.676044, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.676107, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.676169, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8557 (numopen=1) >[2011/12/15 11:33:47.676231, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.676306, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \srvsvc >[2011/12/15 11:33:47.676376, 5] smbd/files.c:464(file_free) > freed files structure 8557 (0 used) >[2011/12/15 11:33:47.676440, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.676502, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3008 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.676816, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.681565, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:47.681635, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:47.681695, 3] smbd/process.c:1661(process_smb) > Transaction 48 of length 104 (0 toread) >[2011/12/15 11:33:47.681755, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.681791, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3072 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 3584 (0xE00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=40704 (0x9F00) > smb_vwv[ 8]= 513 (0x201) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=17 >[2011/12/15 11:33:47.682673, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 77 00 69 00 6E 00 72 00 65 00 67 00 00 .\.w.i.n .r.e.g.. > [0010] 00 . >[2011/12/15 11:33:47.682792, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.682854, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.682920, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = winreg >[2011/12/15 11:33:47.682986, 4] smbd/nttrans.c:293(nt_open_pipe) > nt_open_pipe: Opening pipe \winreg. >[2011/12/15 11:33:47.683052, 5] smbd/files.c:126(file_new) > allocated file structure 4462, fnum = 8558 (1 used) >[2011/12/15 11:33:47.683120, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /tmp/winreg hash 0x718d6f2 >[2011/12/15 11:33:47.683189, 4] rpc_server/rpc_ncacn_np.c:132(make_internal_rpc_pipe_p) > Create pipe requested \winreg >[2011/12/15 11:33:47.683263, 10] rpc_server/rpc_handles.c:116(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe \winreg >[2011/12/15 11:33:47.683325, 10] rpc_server/rpc_handles.c:133(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg >[2011/12/15 11:33:47.683394, 4] rpc_server/rpc_ncacn_np.c:176(make_internal_rpc_pipe_p) > Created internal pipe \winreg (pipes_open=0) >[2011/12/15 11:33:47.683458, 5] smbd/nttrans.c:382(do_ntcreate_pipe_open) > do_ntcreate_pipe_open: open pipe = \winreg >[2011/12/15 11:33:47.686547, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 136 >[2011/12/15 11:33:47.686619, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x88 >[2011/12/15 11:33:47.686678, 3] smbd/process.c:1661(process_smb) > Transaction 49 of length 140 (0 toread) >[2011/12/15 11:33:47.686738, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.686774, 5] lib/util.c:342(show_msg) > size=136 > smb_com=0x2f > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3136 > smt_wct=14 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8558 (0x216E) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]=65535 (0xFFFF) > smb_vwv[ 7]= 8 (0x8) > smb_vwv[ 8]= 72 (0x48) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 72 (0x48) > smb_vwv[11]= 64 (0x40) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_bcc=73 >[2011/12/15 11:33:47.687431, 10] ../lib/util/util.c:415(dump_data) > [0000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... > [0010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ > [0020] 00 01 D0 8C 33 44 22 F1 31 AA AA 90 00 38 00 10 ....3D". 1....8.. > [0030] 03 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ > [0040] 00 2B 10 48 60 02 00 00 00 .+.H`... . >[2011/12/15 11:33:47.687695, 3] smbd/process.c:1466(switch_message) > switch message SMBwriteX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.687757, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.687818, 6] smbd/pipes.c:300(reply_pipe_write_and_X) > reply_pipe_write_and_X: 216e name: winreg len: 72 >[2011/12/15 11:33:47.687881, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 72 >[2011/12/15 11:33:47.687942, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 72 >[2011/12/15 11:33:47.688002, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 >[2011/12/15 11:33:47.688062, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.688123, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.688182, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.688241, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 >[2011/12/15 11:33:47.688303, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.688362, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 56 >[2011/12/15 11:33:47.688421, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 >[2011/12/15 11:33:47.688482, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.688551, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND (11) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0048 (72) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 11) > bind: struct dcerpc_bind > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x00000000 (0) > num_contexts : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ctx_list > context_id : 0x0000 (0) > num_transfer_syntaxes : 0x01 (1) > abstract_syntax: struct ndr_syntax_id > uuid : 338cd001-2244-31f1-aaaa-900038001003 > if_version : 0x00000001 (1) > transfer_syntaxes: ARRAY(1) > transfer_syntaxes: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.689452, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 11 >[2011/12/15 11:33:47.689513, 3] rpc_server/srv_pipe.c:889(api_pipe_bind_req) > api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg >[2011/12/15 11:33:47.689574, 5] rpc_server/srv_pipe.c:923(api_pipe_bind_req) > api_pipe_bind_req: make response. 923 >[2011/12/15 11:33:47.689633, 3] rpc_server/srv_pipe.c:339(check_bind_req) > check_bind_req for \winreg >[2011/12/15 11:33:47.689695, 3] rpc_server/srv_pipe.c:346(check_bind_req) > check_bind_req: \PIPE\winreg -> \PIPE\winreg >[2011/12/15 11:33:47.689770, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\winreg' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : 0x0000 (0) > reason : 0x0000 (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2011/12/15 11:33:47.690619, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 56 >[2011/12/15 11:33:47.690686, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.690748, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.690807, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.690911, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:47.690987, 3] smbd/pipes.c:361(pipe_write_andx_done) > writeX-IPC nwritten=72 >[2011/12/15 11:33:47.693149, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:47.693218, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:47.693278, 3] smbd/process.c:1661(process_smb) > Transaction 50 of length 63 (0 toread) >[2011/12/15 11:33:47.693338, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.693374, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3200 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8558 (0x216E) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 1024 (0x400) > smb_vwv[ 6]= 1024 (0x400) > smb_vwv[ 7]=65535 (0xFFFF) > smb_vwv[ 8]=65535 (0xFFFF) > smb_vwv[ 9]= 1024 (0x400) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:47.693975, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.694013, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.694095, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share IPC$ is ok for unix user nobody >[2011/12/15 11:33:47.694161, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share IPC$ is read-only for unix user nobody >[2011/12/15 11:33:47.694245, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:47.694315, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.694379, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:47.694627, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:47.694747, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:47.694813, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \winreg len: 1024 >[2011/12/15 11:33:47.694876, 10] rpc_server/srv_pipe_hnd.c:325(read_from_internal_pipe) > read_from_pipe: \winreg: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. >[2011/12/15 11:33:47.694939, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.695013, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2011/12/15 11:33:47.695075, 3] smbd/pipes.c:485(pipe_read_andx_done) > readX-IPC min=1024 max=1024 nread=68 >[2011/12/15 11:33:47.697023, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 120 >[2011/12/15 11:33:47.697093, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x78 >[2011/12/15 11:33:47.697153, 3] smbd/process.c:1661(process_smb) > Transaction 51 of length 124 (0 toread) >[2011/12/15 11:33:47.697212, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.697248, 5] lib/util.c:342(show_msg) > size=120 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3264 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 36 (0x24) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 36 (0x24) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8558 (0x216E) > smb_bcc=53 >[2011/12/15 11:33:47.697964, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 24 00 00 00 01 00 00 ........ .$...... > [0020] 00 0C 00 00 00 00 00 02 00 00 00 02 00 58 09 01 ........ .....X.. > [0030] 00 00 00 00 02 ..... >[2011/12/15 11:33:47.698185, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.698247, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.698312, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=36 params=0 setup=2 >[2011/12/15 11:33:47.698375, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.698434, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.698506, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.698565, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "winreg" (pnum 216e) >[2011/12/15 11:33:47.698625, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.698704, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 36 >[2011/12/15 11:33:47.698766, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 36 >[2011/12/15 11:33:47.698825, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 36 >[2011/12/15 11:33:47.698885, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 36, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.698946, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.699006, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 20 >[2011/12/15 11:33:47.699065, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 20 >[2011/12/15 11:33:47.699126, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.699185, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 20 >[2011/12/15 11:33:47.699245, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 20, incoming data = 20 >[2011/12/15 11:33:47.699305, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.699370, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0024 (36) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x0000000c (12) > context_id : 0x0000 (0) > opnum : 0x0002 (2) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=12 > [0000] 00 00 02 00 58 09 01 00 00 00 00 02 ....X... .... >[2011/12/15 11:33:47.700050, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.700110, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.700170, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\winreg >[2011/12/15 11:33:47.700232, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \winreg op 0x2 - api_rpcTNP: rpc command: WINREG_OPENHKLM >[2011/12/15 11:33:47.700300, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[2].fn == 0x399eaf >[2011/12/15 11:33:47.700370, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : * > system_name : 0x0958 (2392) > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:47.700780, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2011/12/15 11:33:47.700853, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.700917, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.700977, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:47.701037, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:47.701096, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:47.701274, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:47.701341, 10] registry/reg_backend_db.c:602(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2011/12/15 11:33:47.701410, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2011/12/15 11:33:47.701476, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2011/12/15 11:33:47.701538, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:47.701597, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM] >[2011/12/15 11:33:47.701700, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM] >[2011/12/15 11:33:47.701789, 10] ../libcli/security/access_check.c:177(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x20019, remaining = 0x20019 >[2011/12/15 11:33:47.701856, 4] rpc_server/rpc_handles.c:197(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.701984, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000e-0000-0000-e94e-dba2be730000 > result : WERR_OK >[2011/12/15 11:33:47.702220, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \winreg successfully >[2011/12/15 11:33:47.702285, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 20 >[2011/12/15 11:33:47.702362, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \winreg len: 1024 >[2011/12/15 11:33:47.702425, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \winreg: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. >[2011/12/15 11:33:47.702507, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 00 00 00 00 .s...... >[2011/12/15 11:33:47.703209, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.703281, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2011/12/15 11:33:47.703344, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..48] (align 0) >[2011/12/15 11:33:47.703406, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.703442, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3264 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2011/12/15 11:33:47.703990, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 01 00 00 ........ .0...... > [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 0E 00 00 ........ ........ > [0020] 00 00 00 00 00 E9 4E DB A2 BE 73 00 00 00 00 00 ......N. ..s..... > [0030] 00 . >[2011/12/15 11:33:47.707658, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 228 >[2011/12/15 11:33:47.707731, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xe4 >[2011/12/15 11:33:47.707791, 3] smbd/process.c:1661(process_smb) > Transaction 52 of length 232 (0 toread) >[2011/12/15 11:33:47.707850, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.707886, 5] lib/util.c:342(show_msg) > size=228 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3328 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 144 (0x90) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 144 (0x90) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8558 (0x216E) > smb_bcc=161 >[2011/12/15 11:33:47.708569, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 90 00 00 00 02 00 00 ........ ........ > [0020] 00 78 00 00 00 00 00 0F 00 00 00 00 00 0E 00 00 .x...... ........ > [0030] 00 00 00 00 00 E9 4E DB A2 BE 73 00 00 46 00 46 ......N. ..s..F.F > [0040] 00 00 00 02 00 23 00 00 00 00 00 00 00 23 00 00 .....#.. .....#.. > [0050] 00 53 00 4F 00 46 00 54 00 57 00 41 00 52 00 45 .S.O.F.T .W.A.R.E > [0060] 00 5C 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F .\.M.i.c .r.o.s.o > [0070] 00 66 00 74 00 5C 00 53 00 63 00 68 00 65 00 64 .f.t.\.S .c.h.e.d > [0080] 00 75 00 6C 00 69 00 6E 00 67 00 41 00 67 00 65 .u.l.i.n .g.A.g.e > [0090] 00 6E 00 74 00 00 00 00 00 00 00 00 00 19 00 02 .n.t.... ........ > [00A0] 00 . >[2011/12/15 11:33:47.709095, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.709157, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.709221, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=144 params=0 setup=2 >[2011/12/15 11:33:47.709285, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.709343, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.709403, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.709466, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "winreg" (pnum 216e) >[2011/12/15 11:33:47.709546, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.709609, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 144 >[2011/12/15 11:33:47.709670, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 144 >[2011/12/15 11:33:47.709730, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 144 >[2011/12/15 11:33:47.709790, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 144, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.709852, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.709911, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 128 >[2011/12/15 11:33:47.709970, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 128 >[2011/12/15 11:33:47.710032, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.710091, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 128 >[2011/12/15 11:33:47.710151, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 128, incoming data = 128 >[2011/12/15 11:33:47.710212, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.710277, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0090 (144) > auth_length : 0x0000 (0) > call_id : 0x00000002 (2) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000078 (120) > context_id : 0x0000 (0) > opnum : 0x000f (15) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=120 > [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 46 00 46 00 00 00 02 00 23 00 00 00 .s..F.F. ....#... > [0020] 00 00 00 00 23 00 00 00 53 00 4F 00 46 00 54 00 ....#... S.O.F.T. > [0030] 57 00 41 00 52 00 45 00 5C 00 4D 00 69 00 63 00 W.A.R.E. \.M.i.c. > [0040] 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 53 00 r.o.s.o. f.t.\.S. > [0050] 63 00 68 00 65 00 64 00 75 00 6C 00 69 00 6E 00 c.h.e.d. u.l.i.n. > [0060] 67 00 41 00 67 00 65 00 6E 00 74 00 00 00 00 00 g.A.g.e. n.t..... > [0070] 00 00 00 00 19 00 02 00 ........ >[2011/12/15 11:33:47.711374, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.711434, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.711494, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\winreg >[2011/12/15 11:33:47.711555, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \winreg op 0xf - api_rpcTNP: rpc command: WINREG_OPENKEY >[2011/12/15 11:33:47.711619, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[15].fn == 0x397f8f >[2011/12/15 11:33:47.711699, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000e-0000-0000-e94e-dba2be730000 > keyname: struct winreg_String > name_len : 0x0046 (70) > name_size : 0x0046 (70) > name : * > name : 'SOFTWARE\Microsoft\SchedulingAgent' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x00020019 (131097) > 1: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 1: KEY_ENUMERATE_SUB_KEYS > 1: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2011/12/15 11:33:47.712433, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.712560, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SOFTWARE] >[2011/12/15 11:33:47.712622, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (1->2) >[2011/12/15 11:33:47.712686, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE] >[2011/12/15 11:33:47.712745, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE] >[2011/12/15 11:33:47.712806, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:47.712865, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SOFTWARE] >[2011/12/15 11:33:47.712966, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE] >[2011/12/15 11:33:47.713054, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [Microsoft] >[2011/12/15 11:33:47.713116, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:33:47.713180, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft] >[2011/12/15 11:33:47.713240, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft] >[2011/12/15 11:33:47.713301, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:47.713360, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SOFTWARE\Microsoft] >[2011/12/15 11:33:47.713453, 10] registry/reg_backend_db.c:1871(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Microsoft] >[2011/12/15 11:33:47.713542, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:33:47.713604, 7] registry/reg_api.c:141(regkey_open_onelevel) > regkey_open_onelevel: name = [SchedulingAgent] >[2011/12/15 11:33:47.713666, 10] registry/reg_backend_db.c:583(regdb_open) > regdb_open: incrementing refcount (2->3) >[2011/12/15 11:33:47.713730, 10] registry/reg_cachehook.c:122(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Microsoft\SchedulingAgent] >[2011/12/15 11:33:47.713790, 10] lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Microsoft\SchedulingAgent] >[2011/12/15 11:33:47.713851, 10] lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2011/12/15 11:33:47.713927, 10] registry/reg_cachehook.c:127(reghook_cache_find) > reghook_cache_find: found ops 0x9b1440 for key [\HKLM\SOFTWARE\Microsoft\SchedulingAgent] >[2011/12/15 11:33:47.714003, 10] registry/reg_backend_db.c:1618(regdb_fetch_keys_internal) > key [HKLM\SOFTWARE\Microsoft\SchedulingAgent] not found >[2011/12/15 11:33:47.714065, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (3->2) >[2011/12/15 11:33:47.714126, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (2->1) >[2011/12/15 11:33:47.714188, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_BADFILE >[2011/12/15 11:33:47.714420, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \winreg successfully >[2011/12/15 11:33:47.714494, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 128 >[2011/12/15 11:33:47.714572, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \winreg len: 1024 >[2011/12/15 11:33:47.714635, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \winreg: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. >[2011/12/15 11:33:47.714704, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000002 (2) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 02 00 00 00 ........ >[2011/12/15 11:33:47.715384, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.715455, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2011/12/15 11:33:47.715518, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..48] (align 0) >[2011/12/15 11:33:47.715579, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.715615, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3328 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2011/12/15 11:33:47.716163, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ > [0030] 00 . >[2011/12/15 11:33:47.718383, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 128 >[2011/12/15 11:33:47.718468, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x80 >[2011/12/15 11:33:47.718530, 3] smbd/process.c:1661(process_smb) > Transaction 53 of length 132 (0 toread) >[2011/12/15 11:33:47.718590, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.718626, 5] lib/util.c:342(show_msg) > size=128 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3392 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 44 (0x2C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 84 (0x54) > smb_vwv[11]= 44 (0x2C) > smb_vwv[12]= 84 (0x54) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]= 8558 (0x216E) > smb_bcc=61 >[2011/12/15 11:33:47.719309, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... > [0010] 00 05 00 00 03 10 00 00 00 2C 00 00 00 03 00 00 ........ .,...... > [0020] 00 14 00 00 00 00 00 05 00 00 00 00 00 0E 00 00 ........ ........ > [0030] 00 00 00 00 00 E9 4E DB A2 BE 73 00 00 ......N. ..s.. >[2011/12/15 11:33:47.719526, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.719588, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.719652, 3] smbd/ipc.c:560(handle_trans) > trans <\PIPE\> data=44 params=0 setup=2 >[2011/12/15 11:33:47.719715, 5] smbd/ipc.c:593(handle_trans) > calling named_pipe >[2011/12/15 11:33:47.719774, 3] smbd/ipc.c:511(named_pipe) > named pipe command on <> name >[2011/12/15 11:33:47.719833, 5] smbd/ipc.c:434(api_fd_reply) > api_fd_reply >[2011/12/15 11:33:47.719891, 3] smbd/ipc.c:475(api_fd_reply) > Got API command 0x26 on pipe "winreg" (pnum 216e) >[2011/12/15 11:33:47.719952, 10] smbd/ipc.c:477(api_fd_reply) > api_fd_reply: p:0x219eec48 max_trans_reply: 1024 >[2011/12/15 11:33:47.720013, 6] rpc_server/srv_pipe_hnd.c:520(np_write_send) > np_write_send: len: 44 >[2011/12/15 11:33:47.720074, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 44 >[2011/12/15 11:33:47.720134, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 44 >[2011/12/15 11:33:47.720194, 10] rpc_server/srv_pipe_hnd.c:50(fill_rpc_header) > fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0 >[2011/12/15 11:33:47.720255, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 16 >[2011/12/15 11:33:47.720314, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 28 >[2011/12/15 11:33:47.720373, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 28 >[2011/12/15 11:33:47.720435, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 0 >[2011/12/15 11:33:47.720494, 10] rpc_server/srv_pipe_hnd.c:242(write_to_internal_pipe) > write_to_pipe: data_left = 28 >[2011/12/15 11:33:47.720553, 10] rpc_server/srv_pipe_hnd.c:138(process_incoming_data) > process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 28, incoming data = 28 >[2011/12/15 11:33:47.720614, 10] rpc_server/srv_pipe.c:1877(process_complete_pdu) > PDU is in Little Endian format! >[2011/12/15 11:33:47.720678, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_REQUEST (0) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x002c (44) > auth_length : 0x0000 (0) > call_id : 0x00000003 (3) > u : union dcerpc_payload(case 0) > request: struct dcerpc_request > alloc_hint : 0x00000014 (20) > context_id : 0x0000 (0) > opnum : 0x0005 (5) > object : union dcerpc_object(case 0) > empty: struct dcerpc_empty > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=20 > [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.721420, 10] rpc_server/srv_pipe.c:1890(process_complete_pdu) > Processing packet type 0 >[2011/12/15 11:33:47.721485, 10] rpc_server/srv_pipe.c:1734(dcesrv_auth_request) > Checking request auth. >[2011/12/15 11:33:47.721545, 5] rpc_server/srv_pipe.c:1571(api_pipe_request) > Requested \PIPE\\winreg >[2011/12/15 11:33:47.721606, 4] rpc_server/srv_pipe.c:1611(api_rpcTNP) > api_rpcTNP: \winreg op 0x5 - api_rpcTNP: rpc command: WINREG_CLOSEKEY >[2011/12/15 11:33:47.721669, 6] rpc_server/srv_pipe.c:1645(api_rpcTNP) > api_rpc_cmds[5].fn == 0x39973d >[2011/12/15 11:33:47.721732, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000e-0000-0000-e94e-dba2be730000 >[2011/12/15 11:33:47.721937, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.722061, 4] rpc_server/rpc_handles.c:232(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0E 00 00 00 00 00 00 00 E9 4E DB A2 ........ .....N.. > [0010] BE 73 00 00 .s.. >[2011/12/15 11:33:47.722184, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) > Closed policy >[2011/12/15 11:33:47.722243, 10] registry/reg_backend_db.c:619(regdb_close) > regdb_close: decrementing refcount (1->0) >[2011/12/15 11:33:47.722315, 1] ../librpc/ndr/ndr.c:284(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2011/12/15 11:33:47.722562, 5] rpc_server/srv_pipe.c:1679(api_rpcTNP) > api_rpcTNP: called \winreg successfully >[2011/12/15 11:33:47.722627, 10] rpc_server/srv_pipe_hnd.c:247(write_to_internal_pipe) > write_to_pipe: data_used = 28 >[2011/12/15 11:33:47.722703, 6] rpc_server/srv_pipe_hnd.c:284(read_from_internal_pipe) > name: \winreg len: 1024 >[2011/12/15 11:33:47.722766, 10] rpc_server/srv_pipe_hnd.c:346(read_from_internal_pipe) > read_from_pipe: \winreg: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 24. >[2011/12/15 11:33:47.722835, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000003 (3) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > _pad : DATA_BLOB length=0 > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 00 00 00 00 ........ >[2011/12/15 11:33:47.723530, 3] rpc_server/srv_pipe_hnd.c:121(free_pipe_context) > free_pipe_context: destroying talloc pool of size 24 >[2011/12/15 11:33:47.723603, 10] rpc_server/srv_pipe_hnd.c:788(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2011/12/15 11:33:47.723666, 5] smbd/ipc.c:62(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..48] (align 0) >[2011/12/15 11:33:47.723727, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.723763, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=460 > smb_uid=0 > smb_mid=3392 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2011/12/15 11:33:47.724310, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 05 00 02 03 10 00 00 00 30 00 00 00 03 00 00 ........ .0...... > [0010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0030] 00 . >[2011/12/15 11:33:47.727771, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:47.727843, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:47.727903, 3] smbd/process.c:1661(process_smb) > Transaction 54 of length 45 (0 toread) >[2011/12/15 11:33:47.727963, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.727998, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3456 > smt_wct=3 > smb_vwv[ 0]= 8558 (0x216E) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:47.728381, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:47.728419, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:47.728481, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:47.728541, 3] smbd/reply.c:4851(reply_close) > close fd=-1 fnum=8558 (numopen=1) >[2011/12/15 11:33:47.728603, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:47.728675, 10] rpc_server/rpc_handles.c:307(close_policy_by_pipe) > close_policy_by_pipe: deleted handle list for pipe \winreg >[2011/12/15 11:33:47.728742, 5] smbd/files.c:464(file_free) > freed files structure 8558 (0 used) >[2011/12/15 11:33:47.728804, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:47.728841, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=3456 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:47.729153, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.225441, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 276 >[2011/12/15 11:33:48.225566, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x114 >[2011/12/15 11:33:48.225650, 3] smbd/process.c:1661(process_smb) > Transaction 55 of length 280 (0 toread) >[2011/12/15 11:33:48.225713, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.225749, 5] lib/util.c:342(show_msg) > size=276 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=0 > smb_pid=65279 > smb_uid=0 > smb_mid=3520 > smt_wct=13 > smb_vwv[ 0]= 117 (0x75) > smb_vwv[ 1]= 186 (0xBA) > smb_vwv[ 2]=16644 (0x4104) > smb_vwv[ 3]= 50 (0x32) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]=29630 (0x73BE) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 1 (0x1) > smb_vwv[ 8]= 1 (0x1) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 212 (0xD4) > smb_vwv[12]= 0 (0x0) > smb_bcc=125 >[2011/12/15 11:33:48.226366, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 64 00 6D 00 00 00 44 00 4D 00 54 00 45 ...d.m.. .D.M.T.E > [0010] 00 53 00 54 00 00 00 57 00 69 00 6E 00 64 00 6F .S.T...W .i.n.d.o > [0020] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. > [0030] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 20 .S.e.r.v .i.c.e. > [0040] 00 50 00 61 00 63 00 6B 00 20 00 33 00 20 00 32 .P.a.c.k . .3. .2 > [0050] 00 36 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 .6.0.0.. .W.i.n.d > [0060] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 > [0070] 00 20 00 35 00 2E 00 31 00 00 00 00 00 . .5...1 ..... >[2011/12/15 11:33:48.226779, 3] smbd/process.c:1466(switch_message) > switch message SMBsesssetupX (pid 29630) conn 0x0 >[2011/12/15 11:33:48.226842, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.226902, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.226961, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.227067, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:48.227132, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) > wct=13 flg2=0xc807 >[2011/12/15 11:33:48.227201, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) > Domain=[DMTEST] NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] >[2011/12/15 11:33:48.227264, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) > sesssetupX:name=[DMTEST]\[dm]@[81.95.129.43] >[2011/12/15 11:33:48.227354, 6] param/loadparm.c:7497(lp_file_list_changed) > lp_file_list_changed() > file /opt/samba/smb.conf -> /opt/samba/smb.conf last mod_time: Thu Dec 15 10:52:11 2011 > >[2011/12/15 11:33:48.227490, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user dm >[2011/12/15 11:33:48.227550, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is dm >[2011/12/15 11:33:48.227614, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [dm]! >[2011/12/15 11:33:48.227679, 3] smbd/sesssetup.c:151(check_guest_password) > Got anonymous request >[2011/12/15 11:33:48.227740, 5] auth/auth.c:508(make_auth_context_subsystem) > Making default auth method list for security=share, encrypt passwords = yes >[2011/12/15 11:33:48.227804, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2011/12/15 11:33:48.227865, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method guest has a valid init >[2011/12/15 11:33:48.227926, 5] auth/auth.c:385(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam >[2011/12/15 11:33:48.227987, 5] auth/auth.c:410(load_auth_module) > load_auth_module: auth method sam has a valid init >[2011/12/15 11:33:48.228048, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for () >[2011/12/15 11:33:48.228108, 5] auth/user_info.c:70(make_user_info) > making strings for 's user_info struct >[2011/12/15 11:33:48.228169, 5] auth/user_info.c:87(make_user_info) > making blobs for 's user_info struct >[2011/12/15 11:33:48.228247, 10] auth/user_info.c:123(make_user_info) > made a user_info for () >[2011/12/15 11:33:48.228307, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface >[2011/12/15 11:33:48.228368, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: []\[]@[] >[2011/12/15 11:33:48.228427, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by fixed >[2011/12/15 11:33:48.228487, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.228545, 5] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 ........ >[2011/12/15 11:33:48.228629, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [] >[2011/12/15 11:33:48.228698, 3] auth/auth.c:268(check_ntlm_password) > check_ntlm_password: guest authentication for user [] succeeded >[2011/12/15 11:33:48.228760, 5] auth/auth.c:309(check_ntlm_password) > check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded >[2011/12/15 11:33:48.228834, 3] smbd/process.c:1466(switch_message) > switch message SMBtconX (pid 29630) conn 0x0 >[2011/12/15 11:33:48.228895, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.228955, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.229013, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.229105, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:48.229176, 4] smbd/reply.c:794(reply_tcon_and_X) > Client requested device type [?????] for share [PUBLIC] >[2011/12/15 11:33:48.229248, 5] smbd/service.c:1267(make_connection) > making a connection to 'normal' service public >[2011/12/15 11:33:48.229310, 3] lib/access.c:338(allow_access) > Allowed connection from 81.95.129.43 (81.95.129.43) >[2011/12/15 11:33:48.229380, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user public >[2011/12/15 11:33:48.229441, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is public >[2011/12/15 11:33:48.229578, 5] lib/username.c:134(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is PUBLIC >[2011/12/15 11:33:48.229691, 5] lib/username.c:143(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in public >[2011/12/15 11:33:48.229752, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [public]! >[2011/12/15 11:33:48.229819, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.229881, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.229941, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:48.230001, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:48.230062, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:48.230122, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:48.230181, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.230243, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:48.230303, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.230362, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.230421, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.230529, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:48.230589, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.230653, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:48.230714, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.230777, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.230839, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.230898, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.230958, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.231017, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.231127, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:48.231220, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.231282, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:48.231343, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.231405, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.231471, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.231533, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.231593, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:48.231653, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:48.231714, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:48.231774, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:48.231833, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.231895, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:48.231955, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.232014, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.232073, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.232157, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:48.232217, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.232281, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:48.232341, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.232404, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.232465, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.232525, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.232584, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.232643, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.232760, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:48.232851, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.232913, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:48.232973, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.233035, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.233101, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.233162, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.233223, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:48.233283, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:48.233343, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:48.233403, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:48.233468, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.233531, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:48.233591, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.233650, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.233709, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.233792, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:48.233854, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.233917, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:48.233977, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.234040, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.234101, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.234161, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.234220, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.234279, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.234380, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:48.234487, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.234549, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:48.234610, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.234671, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.234737, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.234816, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [dm] from workstation [81.95.129.43] >[2011/12/15 11:33:48.234877, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for dm (dm) >[2011/12/15 11:33:48.234937, 5] auth/user_info.c:70(make_user_info) > making strings for dm's user_info struct >[2011/12/15 11:33:48.234998, 5] auth/user_info.c:87(make_user_info) > making blobs for dm's user_info struct >[2011/12/15 11:33:48.235058, 10] auth/user_info.c:123(make_user_info) > made a user_info for dm (dm) >[2011/12/15 11:33:48.235117, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[dm]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.235178, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[dm]@[81.95.129.43] >[2011/12/15 11:33:48.235238, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.235298, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.235356, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.235439, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [dm] >[2011/12/15 11:33:48.235500, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.235563, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [dm] >[2011/12/15 11:33:48.235624, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.235686, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.235747, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.235807, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.235866, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.235925, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.236025, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_dm >[2011/12/15 11:33:48.236116, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.236178, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'dm' in passdb. >[2011/12/15 11:33:48.236238, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.236300, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [dm] -> [dm] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.236366, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.236428, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.236489, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for nobody (nobody) >[2011/12/15 11:33:48.236549, 5] auth/user_info.c:70(make_user_info) > making strings for nobody's user_info struct >[2011/12/15 11:33:48.236609, 5] auth/user_info.c:87(make_user_info) > making blobs for nobody's user_info struct >[2011/12/15 11:33:48.236669, 10] auth/user_info.c:123(make_user_info) > made a user_info for nobody (nobody) >[2011/12/15 11:33:48.236729, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[nobody]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.236790, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[nobody]@[81.95.129.43] >[2011/12/15 11:33:48.236868, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.236927, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.236987, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.237069, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [nobody] >[2011/12/15 11:33:48.237129, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.237193, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [nobody] >[2011/12/15 11:33:48.237253, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.237315, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.237377, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.237436, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.237501, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.237560, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.237661, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:48.237752, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.237814, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'nobody' in passdb. >[2011/12/15 11:33:48.237875, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.237936, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.238003, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [DMTEST]\[nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.238065, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [DMTEST] to [ROCK] for user [nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.238125, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for nobody (nobody) >[2011/12/15 11:33:48.238186, 5] auth/user_info.c:70(make_user_info) > making strings for nobody's user_info struct >[2011/12/15 11:33:48.238246, 5] auth/user_info.c:87(make_user_info) > making blobs for nobody's user_info struct >[2011/12/15 11:33:48.238306, 10] auth/user_info.c:123(make_user_info) > made a user_info for nobody (nobody) >[2011/12/15 11:33:48.238366, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [DMTEST]\[nobody]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.238427, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[nobody]@[81.95.129.43] >[2011/12/15 11:33:48.238496, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.238556, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.238614, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.238697, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [nobody] >[2011/12/15 11:33:48.238757, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.238820, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [nobody] >[2011/12/15 11:33:48.238880, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.238942, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.239021, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.239080, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.239140, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.239199, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.239299, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:48.239390, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.239452, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'nobody' in passdb. >[2011/12/15 11:33:48.239512, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.239574, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.239641, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.239702, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.239762, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for nobody (nobody) >[2011/12/15 11:33:48.239822, 5] auth/user_info.c:70(make_user_info) > making strings for nobody's user_info struct >[2011/12/15 11:33:48.239883, 5] auth/user_info.c:87(make_user_info) > making blobs for nobody's user_info struct >[2011/12/15 11:33:48.239943, 10] auth/user_info.c:123(make_user_info) > made a user_info for nobody (nobody) >[2011/12/15 11:33:48.240002, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[nobody]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.240064, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[nobody]@[81.95.129.43] >[2011/12/15 11:33:48.240125, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.240184, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.240243, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.240324, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [nobody] >[2011/12/15 11:33:48.240384, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.240448, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [nobody] >[2011/12/15 11:33:48.240508, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.240570, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.240631, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.240690, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.240750, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.240809, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.240909, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:48.241000, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.241062, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'nobody' in passdb. >[2011/12/15 11:33:48.241138, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.241200, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.241267, 5] auth/auth_util.c:110(make_user_info_map) > Mapping user [TEST]\[nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.241329, 5] auth/auth_util.c:131(make_user_info_map) > Mapped domain from [TEST] to [ROCK] for user [nobody] from workstation [81.95.129.43] >[2011/12/15 11:33:48.241389, 5] auth/user_info.c:59(make_user_info) > attempting to make a user_info for nobody (nobody) >[2011/12/15 11:33:48.241452, 5] auth/user_info.c:70(make_user_info) > making strings for nobody's user_info struct >[2011/12/15 11:33:48.241515, 5] auth/user_info.c:87(make_user_info) > making blobs for nobody's user_info struct >[2011/12/15 11:33:48.241575, 10] auth/user_info.c:123(make_user_info) > made a user_info for nobody (nobody) >[2011/12/15 11:33:48.241635, 3] auth/auth.c:219(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [TEST]\[nobody]@[81.95.129.43] with the new password interface >[2011/12/15 11:33:48.241696, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [ROCK]\[nobody]@[81.95.129.43] >[2011/12/15 11:33:48.241756, 10] auth/auth.c:231(check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2011/12/15 11:33:48.241816, 10] auth/auth.c:233(check_ntlm_password) > challenge is: >[2011/12/15 11:33:48.241874, 5] ../lib/util/util.c:415(dump_data) > [0000] 9E 3E 32 B6 AE 9F D9 62 .>2....b >[2011/12/15 11:33:48.241959, 10] auth/auth_builtin.c:44(check_guest_security) > Check auth for: [nobody] >[2011/12/15 11:33:48.242019, 10] auth/auth.c:259(check_ntlm_password) > check_ntlm_password: guest had nothing to say >[2011/12/15 11:33:48.242083, 10] auth/auth_sam.c:75(auth_samstrict_auth) > Check auth for: [nobody] >[2011/12/15 11:33:48.242143, 8] lib/util.c:1521(is_myname) > is_myname("ROCK") returns 1 >[2011/12/15 11:33:48.242205, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.242266, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.242326, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.242386, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.242452, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.242555, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:48.242647, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.242709, 3] auth/check_samsec.c:399(check_sam_security) > check_sam_security: Couldn't find user 'nobody' in passdb. >[2011/12/15 11:33:48.242769, 5] auth/auth.c:271(check_ntlm_password) > check_ntlm_password: sam authentication for user [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.242831, 2] auth/auth.c:319(check_ntlm_password) > check_ntlm_password: Authentication for user [nobody] -> [nobody] FAILED with error NT_STATUS_NO_SUCH_USER >[2011/12/15 11:33:48.242900, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.242961, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.243023, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.243083, 3] smbd/password.c:720(authorise_login) > authorise_login: ACCEPTED: guest account and guest ok (nobody) >[2011/12/15 11:33:48.243162, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.243241, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.243321, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.243402, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:33:48.243474, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:48.243562, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.243632, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.243705, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.243784, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was >[2011/12/15 11:33:48.243860, 10] passdb/pdb_get_set.c:614(pdb_set_fullname) > pdb_set_full_name: setting full name nobody, was >[2011/12/15 11:33:48.243934, 10] passdb/pdb_get_set.c:568(pdb_set_domain) > pdb_set_domain: setting domain ROCK, was >[2011/12/15 11:33:48.244011, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-251563815-16092371-1107951384-501 >[2011/12/15 11:33:48.244092, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-251563815-16092371-1107951384-501 from rid 501 >[2011/12/15 11:33:48.244196, 10] passdb/pdb_get_set.c:545(pdb_set_username) > pdb_set_username: setting username nobody, was nobody >[2011/12/15 11:33:48.244269, 10] passdb/pdb_get_set.c:470(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-22-1-65534 >[2011/12/15 11:33:48.244381, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for nobody >[2011/12/15 11:33:48.244459, 10] auth/server_info.c:354(samu_to_SamInfo3) > Unix User found in struct samu. Rid marked as special and sid (S-1-22-1-65534) saved as extra sid >[2011/12/15 11:33:48.244544, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.244617, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.244692, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.244819, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:33:48.245020, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: ROCK\nobody => domain=[ROCK], name=[nobody] >[2011/12/15 11:33:48.245098, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:48.245175, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.245251, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.245322, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.245394, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.245467, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.245610, 5] passdb/pdb_tdb.c:562(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody >[2011/12/15 11:33:48.245722, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.245799, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.245873, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.245945, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.246046, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.246119, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.246269, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.246353, 10] passdb/lookup_sid.c:76(lookup_name) > lookup_name: Unix User\nobody => domain=[Unix User], name=[nobody] >[2011/12/15 11:33:48.246426, 10] passdb/lookup_sid.c:77(lookup_name) > lookup_name: flags = 0x073 >[2011/12/15 11:33:48.246537, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.246610, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.246685, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.246766, 10] passdb/lookup_sid.c:1527(sid_to_uid) > sid S-1-22-1-65534 -> uid 65534 >[2011/12/15 11:33:48.246942, 10] lib/system_smbd.c:175(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2011/12/15 11:33:48.247116, 10] auth/token_util.c:339(create_local_nt_token) > Create local NT token for S-1-22-1-65534 >[2011/12/15 11:33:48.247251, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-544 >[2011/12/15 11:33:48.247331, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.247406, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.247477, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.247549, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.247620, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.247775, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.247851, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-544 >[2011/12/15 11:33:48.247927, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.248000, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.248071, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.248141, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.248212, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.248346, 3] auth/token_util.c:438(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:48.248430, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.248547, 10] passdb/lookup_sid.c:1611(sid_to_gid) > winbind failed to find a gid for sid S-1-5-32-545 >[2011/12/15 11:33:48.248625, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.248698, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.248770, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.248841, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.248911, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.249059, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.249134, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-545 >[2011/12/15 11:33:48.249211, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.249315, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.249387, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.249459, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.249530, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.249666, 3] auth/token_util.c:469(finalize_local_nt_token) > Failed to fetch domain sid for TEST >[2011/12/15 11:33:48.249750, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.249825, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.249898, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.249969, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.250039, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.250109, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.250334, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.250430, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-65534] >[2011/12/15 11:33:48.250565, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-65534] >[2011/12/15 11:33:48.250652, 5] lib/privileges.c:175(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2011/12/15 11:33:48.250763, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2011/12/15 11:33:48.250848, 4] lib/privileges.c:97(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2011/12/15 11:33:48.251060, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2011/12/15 11:33:48.251142, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.251217, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.251289, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.251360, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.251431, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.251582, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.251657, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:48.251732, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-1-0 >[2011/12/15 11:33:48.251808, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.251880, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.251951, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.252024, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.252094, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.252242, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.252318, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:48.252421, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-2 >[2011/12/15 11:33:48.252498, 4] smbd/sec_ctx.c:214(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.252571, 4] smbd/uid.c:460(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.252641, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2011/12/15 11:33:48.252711, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.252783, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.252932, 4] smbd/sec_ctx.c:422(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.253008, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:48.253084, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2011/12/15 11:33:48.253160, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2011/12/15 11:33:48.253234, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2011/12/15 11:33:48.253307, 10] auth/auth_util.c:505(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2011/12/15 11:33:48.253386, 10] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:48.253670, 10] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:48.253815, 5] lib/username.c:171(Get_Pwnam_alloc) > Finding user nobody >[2011/12/15 11:33:48.253889, 5] lib/username.c:116(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2011/12/15 11:33:48.253965, 5] lib/username.c:149(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2011/12/15 11:33:48.254056, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:33:48.254132, 3] smbd/service.c:845(make_connection_snum) > Connect path is '/mnt/public' for service [public] >[2011/12/15 11:33:48.254230, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.254310, 10] ../libcli/security/access_check.c:177(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x101f01ff, remaining = 0x101f01ff >[2011/12/15 11:33:48.254387, 3] smbd/vfs.c:102(vfs_init_default) > Initialising default vfs hooks >[2011/12/15 11:33:48.254479, 3] smbd/vfs.c:128(vfs_init_custom) > Initialising custom vfs hooks from [/[Default VFS]/] >[2011/12/15 11:33:48.254553, 10] smbd/vfs.c:53(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ > Successfully loaded vfs module [/[Default VFS]/] with the new modules system >[2011/12/15 11:33:48.254660, 5] smbd/connection.c:134(claim_connection) > claiming [public] >[2011/12/15 11:33:48.254878, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:48.254972, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219fc538 >[2011/12/15 11:33:48.255070, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:48.255363, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:33:48.255453, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:48.255530, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:48.255659, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.255754, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.255836, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.255914, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:48.256197, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:48.256357, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:48.256442, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.256514, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.256584, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.256704, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:48.256798, 10] smbd/service.c:162(set_conn_connectpath) > set_conn_connectpath: service public, connectpath = /mnt/public >[2011/12/15 11:33:48.256901, 1] smbd/service.c:1089(make_connection_snum) > 81.95.129.43 (81.95.129.43) connect to service public initially as user nobody (uid=65534, gid=65534) (pid 29630) >[2011/12/15 11:33:48.257001, 3] smbd/reply.c:871(reply_tcon_and_X) > tconX service=PUBLIC >[2011/12/15 11:33:48.259856, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 76 >[2011/12/15 11:33:48.260015, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x4c >[2011/12/15 11:33:48.260087, 3] smbd/process.c:1661(process_smb) > Transaction 56 of length 80 (0 toread) >[2011/12/15 11:33:48.260159, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.260202, 5] lib/util.c:342(show_msg) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3584 > smt_wct=15 > smb_vwv[ 0]= 8 (0x8) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 8 (0x8) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=11 >[2011/12/15 11:33:48.260990, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... >[2011/12/15 11:33:48.261120, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.261197, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:48.261276, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:48.261377, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.261473, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.261553, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.261631, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:48.261949, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:48.263358, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:48.263451, 4] smbd/vfs.c:780(vfs_ChDir) > vfs_ChDir to /mnt/public >[2011/12/15 11:33:48.263551, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:33:48.263657, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:33:48.263758, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:33:48.263834, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:48.263919, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:48.263992, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:48.264076, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:48.264187, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.264268, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 >[2011/12/15 11:33:48.264352, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: . (fnum = -1) level=1004 max_data=40 >[2011/12/15 11:33:48.264431, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:48.264505, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.264580, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.264668, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:33:48.264744, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 11:01:17 2011 > access: Thu Dec 15 11:01:18 2011 > write: Thu Dec 15 11:01:17 2011 > change: Thu Dec 15 11:01:17 2011 > mode: 10 >[2011/12/15 11:33:48.265040, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:33:48.265114, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:33:48.265187, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.265230, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3584 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:33:48.265885, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 80 DC 39 57 F7 BA CC 01 00 73 D2 .......9 W.....s. > [0010] 57 F7 BA CC 01 80 DC 39 57 F7 BA CC 01 80 DC 39 W......9 W......9 > [0020] 57 F7 BA CC 01 10 00 00 00 00 00 00 00 W....... ..... >[2011/12/15 11:33:48.270152, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 86 >[2011/12/15 11:33:48.270308, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x56 >[2011/12/15 11:33:48.270381, 3] smbd/process.c:1661(process_smb) > Transaction 57 of length 90 (0 toread) >[2011/12/15 11:33:48.270473, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.270517, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3648 > smt_wct=15 > smb_vwv[ 0]= 18 (0x12) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 18 (0x12) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=21 >[2011/12/15 11:33:48.271344, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 2A 00 00 00 .*... >[2011/12/15 11:33:48.271538, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.271615, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.271703, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:48.271791, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "*" >[2011/12/15 11:33:48.271874, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [*] >[2011/12/15 11:33:48.271955, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = *, dirpath = , start = * >[2011/12/15 11:33:48.272027, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled * ? >[2011/12/15 11:33:48.272090, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component * (len 1) ? >[2011/12/15 11:33:48.272152, 5] smbd/filename.c:609(unix_convert) > Wildcard * >[2011/12/15 11:33:48.272212, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [*] [/mnt/public] >[2011/12/15 11:33:48.272305, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [*] -> [/mnt/public/*] >[2011/12/15 11:33:48.272366, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: * reduced to /mnt/public/* >[2011/12/15 11:33:48.272427, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = * >[2011/12/15 11:33:48.272494, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:48.272555, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:48.272618, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:48.272678, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:48.272776, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:48.272842, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = *, attr = 22 >[2011/12/15 11:33:48.272902, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:48.272972, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset 0 >[2011/12/15 11:33:48.273052, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./. >[2011/12/15 11:33:48.273113, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.273175, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.273251, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.273312, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./. fname=. (.) >[2011/12/15 11:33:48.273379, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:48.273440, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.273516, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset -2147483648 >[2011/12/15 11:33:48.273610, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./.. >[2011/12/15 11:33:48.273672, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.273733, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.273804, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.273865, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..) >[2011/12/15 11:33:48.273928, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16288 >[2011/12/15 11:33:48.273989, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.274073, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset 909579444 >[2011/12/15 11:33:48.274151, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:48.274213, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:48.274274, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:48.274345, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.274406, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:48.274490, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16188 >[2011/12/15 11:33:48.274551, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.274617, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset 1415180083 >[2011/12/15 11:33:48.274692, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./lost+found >[2011/12/15 11:33:48.274754, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.274814, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.274882, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.274942, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./lost+found fname=lost+found (lost+found) >[2011/12/15 11:33:48.275005, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16068 >[2011/12/15 11:33:48.275065, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.275134, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:33:48.275201, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset 2147483647 >[2011/12/15 11:33:48.275277, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_folder >[2011/12/15 11:33:48.275338, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.275399, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.275470, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.275530, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[*] found ./test_folder fname=test_folder (test_folder) >[2011/12/15 11:33:48.275594, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 15952 >[2011/12/15 11:33:48.275654, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.275719, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:33:48.275803, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc0f8 now at offset -1 >[2011/12/15 11:33:48.275865, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:48.275926, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:48.276006, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 548, useable_space = 16582 >[2011/12/15 11:33:48.276068, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 548, paramsize = 10, datasize = 548 >[2011/12/15 11:33:48.276129, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.276166, 5] lib/util.c:342(show_msg) > size=616 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3648 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 548 (0x224) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 548 (0x224) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=561 >[2011/12/15 11:33:48.276879, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 05 00 01 00 00 00 B0 01 00 00 60 00 00 ........ .....`.. > [0010] 00 00 00 00 00 80 DC 39 57 F7 BA CC 01 00 73 D2 .......9 W.....s. > [0020] 57 F7 BA CC 01 80 DC 39 57 F7 BA CC 01 80 DC 39 W......9 W......9 > [0030] 57 F7 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 W....... ........ > [0040] 00 00 00 00 00 10 00 00 00 02 00 00 00 00 00 00 ........ ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 2E 00 64 00 00 ........ .....d.. > [0070] 00 00 00 00 00 00 7C 7F 87 F3 BA CC 01 80 C6 DC ......|. ........ > [0080] 8C F3 BA CC 01 00 7C 7F 87 F3 BA CC 01 00 7C 7F ......|. ......|. > [0090] 87 F3 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [00A0] 00 00 00 00 00 10 00 00 00 04 00 00 00 00 00 00 ........ ........ > [00B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [00C0] 00 00 00 00 00 00 00 00 00 00 00 2E 00 2E 00 00 ........ ........ > [00D0] 00 78 00 00 00 00 00 00 00 00 B4 A2 37 F7 BA CC .x...... ....7... > [00E0] 01 00 73 D2 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC ..s.W... ....7... > [00F0] 01 00 B4 A2 37 F7 BA CC 01 AA 5B 03 00 00 00 00 ....7... ..[..... > [0100] 00 00 00 10 00 00 00 00 00 20 00 00 00 18 00 00 ........ . ...... > [0110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 ........ .......t > [0130] 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 00 2E .e.s.t._ .i.m.g.. > [0140] 00 62 00 6D 00 70 00 00 00 74 00 00 00 00 00 00 .b.m.p.. .t...... > [0150] 00 00 2D B5 D1 F4 BA CC 01 00 A7 00 C4 F6 BA CC ..-..... ........ > [0160] 01 00 2D B5 D1 F4 BA CC 01 00 2D B5 D1 F4 BA CC ..-..... ..-..... > [0170] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0180] 00 10 00 00 00 14 00 00 00 00 00 00 00 10 00 4C ........ .......L > [0190] 00 32 00 49 00 38 00 31 00 45 00 7E 00 41 00 00 .2.I.8.1 .E.~.A.. > [01A0] 00 00 00 00 00 00 00 6C 00 6F 00 73 00 74 00 2B .......l .o.s.t.+ > [01B0] 00 66 00 6F 00 75 00 6E 00 64 00 00 00 74 00 00 .f.o.u.n .d...t.. > [01C0] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [01D0] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [01E0] 93 F6 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [01F0] 00 00 00 00 00 10 00 00 00 16 00 00 00 00 00 00 ........ ........ >[2011/12/15 11:33:48.278477, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=* directory=. dirtype=22 numentries=5 >[2011/12/15 11:33:48.278545, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: * -> 0A877AA5 -> _2X68P~X (cache=1) >[2011/12/15 11:33:48.425919, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 100 >[2011/12/15 11:33:48.426060, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x64 >[2011/12/15 11:33:48.426123, 3] smbd/process.c:1661(process_smb) > Transaction 58 of length 104 (0 toread) >[2011/12/15 11:33:48.426184, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.426219, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3712 > smt_wct=15 > smb_vwv[ 0]= 32 (0x20) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 32 (0x20) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=35 >[2011/12/15 11:33:48.426899, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 5C 00 64 00 65 00 73 ........ .\.d.e.s > [0010] 00 6B 00 74 00 6F 00 70 00 2E 00 69 00 6E 00 69 .k.t.o.p ...i.n.i > [0020] 00 00 00 ... >[2011/12/15 11:33:48.427069, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.427132, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.427197, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:33:48.427266, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "desktop.ini" >[2011/12/15 11:33:48.427332, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [DESKTOP.INI] >[2011/12/15 11:33:48.427395, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini >[2011/12/15 11:33:48.427468, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:33:48.427530, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:33:48.427594, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:33:48.427653, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:33:48.427754, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled desktop.ini ? >[2011/12/15 11:33:48.427816, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component desktop.ini (len 11) ? >[2011/12/15 11:33:48.427875, 5] smbd/filename.c:781(unix_convert) > New file desktop.ini >[2011/12/15 11:33:48.427936, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [desktop.ini] [/mnt/public] >[2011/12/15 11:33:48.428015, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [desktop.ini] -> [/mnt/public/desktop.ini] >[2011/12/15 11:33:48.428076, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: desktop.ini reduced to /mnt/public/desktop.ini >[2011/12/15 11:33:48.428140, 3] smbd/trans2.c:5228(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory) >[2011/12/15 11:33:48.428416, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/trans2.c(5230) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:48.428482, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.428518, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x32 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3712 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.428830, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.435242, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 86 >[2011/12/15 11:33:48.435315, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x56 >[2011/12/15 11:33:48.435400, 3] smbd/process.c:1661(process_smb) > Transaction 59 of length 90 (0 toread) >[2011/12/15 11:33:48.435462, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.435498, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3776 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 256 (0x100) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 256 (0x100) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=3 >[2011/12/15 11:33:48.436372, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:33:48.436448, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.436510, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.436573, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0, fname = >[2011/12/15 11:33:48.436640, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:33:48.436704, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:33:48.436764, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:48.436828, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:48.436888, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:48.436949, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:48.437022, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:48.437085, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:48.437146, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:48.437209, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:48.437282, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.437350, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:33:48.437521, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.437588, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:48.437662, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:48.437815, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.437953, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:48.438194, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.438257, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:48.438317, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:48.438388, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file . requesting 0x100001 returning 0x100001 (NT_STATUS_OK) >[2011/12/15 11:33:48.438465, 5] smbd/files.c:126(file_new) > allocated file structure 4463, fnum = 8559 (1 used) >[2011/12/15 11:33:48.438534, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:48.438600, 10] smbd/open.c:179(fd_open) > fd_open: name ., flags = 0600000 mode = 00, fd = 31. >[2011/12/15 11:33:48.438675, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:48.438747, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0d550 >[2011/12/15 11:33:48.438819, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:33:48.438925, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:48.439195, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:48.439278, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:48.439338, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:48.439399, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:48.439462, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.439523, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.439593, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:48.439690, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:48.439761, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8559, open name = . >[2011/12/15 11:33:48.443237, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 84 >[2011/12/15 11:33:48.443389, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x54 >[2011/12/15 11:33:48.443463, 3] smbd/process.c:1661(process_smb) > Transaction 60 of length 88 (0 toread) >[2011/12/15 11:33:48.443534, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.443577, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3840 > smt_wct=23 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 8192 (0x2000) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 4 (0x4) > smb_vwv[19]= 23 (0x17) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 8559 (0x216F) > smb_vwv[22]= 0 (0x0) > smb_bcc=3 >[2011/12/15 11:33:48.444624, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:33:48.444748, 3] smbd/process.c:1466(switch_message) > switch message SMBnttrans (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.444825, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.444907, 10] smbd/nttrans.c:3079(reply_nttrans) > num_setup=8, param_total=0, this_param=0, max_param=32, data_total=0, this_data=0, max_data=0, param_offset=84, data_offset=0 >[2011/12/15 11:33:48.444986, 10] smbd/nttrans.c:3151(reply_nttrans) > reply_nttrans: state->setup_count = 8 >[2011/12/15 11:33:48.445057, 10] ../lib/util/util.c:415(dump_data) > [0000] 17 00 00 00 6F 21 00 00 ....o!.. >[2011/12/15 11:33:48.445169, 3] smbd/nttrans.c:1703(call_nt_transact_notify_change) > call_nt_transact_notify_change >[2011/12/15 11:33:48.445260, 3] smbd/nttrans.c:1720(call_nt_transact_notify_change) > call_nt_transact_notify_change: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0 >[2011/12/15 11:33:48.445364, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 6E6F7469667920617272 >[2011/12/15 11:33:48.445458, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219ed648 >[2011/12/15 11:33:48.445596, 10] smbd/notify_inotify.c:416(inotify_watch) > inotify_add_watch for /mnt/public mask 210003c6 returned wd 1 >[2011/12/15 11:33:48.445674, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 6E6F7469667920617272 >[2011/12/15 11:33:48.445763, 10] smbd/notify.c:228(change_notify_add_request) > change_notify_add_request: Adding request for .: max_param = 32 >[2011/12/15 11:33:48.554507, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 104 >[2011/12/15 11:33:48.554675, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x68 >[2011/12/15 11:33:48.554753, 3] smbd/process.c:1661(process_smb) > Transaction 61 of length 108 (0 toread) >[2011/12/15 11:33:48.554825, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.554869, 5] lib/util.c:342(show_msg) > size=104 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3905 > smt_wct=15 > smb_vwv[ 0]= 36 (0x24) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 36 (0x24) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=39 >[2011/12/15 11:33:48.555683, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F 00 75 .l.o.s.t .+.f.o.u > [0020] 00 6E 00 64 00 00 00 .n.d... >[2011/12/15 11:33:48.555941, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.556023, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.556106, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:48.556196, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.556357, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [LOST+FOUND] >[2011/12/15 11:33:48.556434, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = lost+found, dirpath = , start = lost+found >[2011/12/15 11:33:48.556532, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (21a0e8d8:size a) LOST+FOUND -> lost+found >[2011/12/15 11:33:48.556608, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished lost+found -> lost+found >[2011/12/15 11:33:48.556682, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.556773, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.556847, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.556922, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = lost+found >[2011/12/15 11:33:48.557001, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:48.557074, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:48.557152, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:48.557224, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:48.557320, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:48.557395, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = lost+found, attr = 22 >[2011/12/15 11:33:48.557470, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:48.557573, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219ed2c8 now at offset -1 >[2011/12/15 11:33:48.557657, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./lost+found >[2011/12/15 11:33:48.557731, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.557805, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.557899, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:48.557972, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[lost+found] found ./lost+found fname=lost+found (lost+found) >[2011/12/15 11:33:48.558057, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:48.558130, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:48.558219, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:33:48.558299, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:48.558372, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:48.558483, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2011/12/15 11:33:48.558568, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2011/12/15 11:33:48.558655, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.558706, 5] lib/util.c:342(show_msg) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3905 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2011/12/15 11:33:48.559431, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [0010] 00 00 00 00 00 00 2D B5 D1 F4 BA CC 01 00 A7 00 ......-. ........ > [0020] C4 F6 BA CC 01 00 2D B5 D1 F4 BA CC 01 00 2D B5 ......-. ......-. > [0030] D1 F4 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0040] 00 00 00 00 00 10 00 00 00 14 00 00 00 00 00 00 ........ ........ > [0050] 00 10 00 4C 00 32 00 49 00 38 00 31 00 45 00 7E ...L.2.I .8.1.E.~ > [0060] 00 41 00 00 00 00 00 00 00 00 00 6C 00 6F 00 73 .A...... ...l.o.s > [0070] 00 74 00 2B 00 66 00 6F 00 75 00 6E 00 64 00 00 .t.+.f.o .u.n.d.. > [0080] 00 . >[2011/12/15 11:33:48.560134, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=lost+found directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:48.560239, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: lost+found -> 09085312 -> L2I81E~A (cache=1) >[2011/12/15 11:33:48.562970, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.563134, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.563209, 3] smbd/process.c:1661(process_smb) > Transaction 62 of length 112 (0 toread) >[2011/12/15 11:33:48.563280, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.563323, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3969 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.564358, 10] ../lib/util/util.c:415(dump_data) > [0000] EF 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.564550, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.564627, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.564709, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.564791, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.564870, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.564953, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.565043, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.565116, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.565190, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.565275, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.565358, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.565465, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.565540, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.565627, 5] smbd/files.c:126(file_new) > allocated file structure 4464, fnum = 8560 (2 used) >[2011/12/15 11:33:48.565708, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.565785, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.565858, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.565939, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.566025, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.566097, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.566169, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.566243, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.566316, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.566396, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.566517, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.566612, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.566683, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.566761, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.566869, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.566950, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.567029, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.567103, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.567191, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.567276, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.567355, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.567436, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.567535, 5] smbd/files.c:464(file_free) > freed files structure 8560 (1 used) >[2011/12/15 11:33:48.567611, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.567691, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.567808, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.567883, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.568000, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.568172, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.568317, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.568618, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.568698, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.568771, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.568859, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.568938, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.569009, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.571990, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.572094, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.572170, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.572247, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.572322, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.572365, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=3969 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.572739, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.575082, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.575214, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.575277, 3] smbd/process.c:1661(process_smb) > Transaction 63 of length 112 (0 toread) >[2011/12/15 11:33:48.575338, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.575374, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4033 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.576296, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.576426, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.576489, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.576558, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.576626, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.576693, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.576762, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.576834, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.576895, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.576957, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.577026, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.577095, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.577155, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.577217, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.577287, 5] smbd/files.c:126(file_new) > allocated file structure 4465, fnum = 8561 (2 used) >[2011/12/15 11:33:48.577356, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.577420, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.577488, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.577555, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.577624, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.577684, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.577745, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.577806, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.577868, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.577930, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.578004, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.578095, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.578157, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.578221, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.578304, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.578371, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.578434, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.578506, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.578578, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.578642, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.578706, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.578772, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.578846, 5] smbd/files.c:464(file_free) > freed files structure 8561 (1 used) >[2011/12/15 11:33:48.578909, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.578975, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.579069, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.579131, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.579200, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.579325, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.579438, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.579674, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.579738, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.579799, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.579870, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.579934, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.579995, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.582157, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.582220, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.582280, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.582343, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.582405, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.582442, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4033 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.582766, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.585786, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.585858, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.585918, 3] smbd/process.c:1661(process_smb) > Transaction 64 of length 112 (0 toread) >[2011/12/15 11:33:48.585978, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.586014, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4097 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.586900, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.587026, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.587088, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.587152, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.587219, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.587282, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.587348, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.587417, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.587478, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.587540, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.587607, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.587693, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.587755, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.587817, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.587886, 5] smbd/files.c:126(file_new) > allocated file structure 4466, fnum = 8562 (2 used) >[2011/12/15 11:33:48.587953, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.588017, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.588079, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.588144, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.588213, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.588273, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.588334, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.588395, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.588456, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.588518, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.588590, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.588657, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.588718, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.588781, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.588863, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.588928, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.588990, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.589052, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.589119, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.589183, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.589246, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.589311, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.589385, 5] smbd/files.c:464(file_free) > freed files structure 8562 (1 used) >[2011/12/15 11:33:48.589449, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.589518, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.589603, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.589681, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.589751, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.589866, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.589976, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.590210, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.590274, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.590335, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.590403, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.590476, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.590537, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.592676, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.592739, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.592799, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.592860, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.592922, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.592958, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4097 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.593274, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.595266, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.595339, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.595400, 3] smbd/process.c:1661(process_smb) > Transaction 65 of length 112 (0 toread) >[2011/12/15 11:33:48.595460, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.595496, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4161 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.596391, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.596517, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.596579, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.596643, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.596709, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.596772, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.596838, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.596907, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.596967, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.597029, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.597097, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.597166, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.597226, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.597287, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.597356, 5] smbd/files.c:126(file_new) > allocated file structure 4467, fnum = 8563 (2 used) >[2011/12/15 11:33:48.597423, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.597491, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.597553, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.597619, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.597688, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.597747, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.597808, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.597871, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.597932, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.597994, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.598083, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.598152, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.598212, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.598275, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.598357, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.598423, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.598495, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.598557, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.598625, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.598689, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.598752, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.598816, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.598890, 5] smbd/files.c:464(file_free) > freed files structure 8563 (1 used) >[2011/12/15 11:33:48.598952, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.599018, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.599102, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.599163, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.599231, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.599346, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.599456, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.599691, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.599754, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.599815, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.599883, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.599947, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.600007, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.602166, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.602229, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.602289, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.602351, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.602413, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.602458, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4161 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.602773, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.605779, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.605850, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.605911, 3] smbd/process.c:1661(process_smb) > Transaction 66 of length 112 (0 toread) >[2011/12/15 11:33:48.605972, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.606008, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4225 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.606892, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.607018, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.607080, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.607144, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.607210, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.607273, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.607339, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.607408, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.607469, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.607530, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.607616, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.607684, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.607744, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.607806, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.607875, 5] smbd/files.c:126(file_new) > allocated file structure 4468, fnum = 8564 (2 used) >[2011/12/15 11:33:48.607942, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.608005, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.608067, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.608132, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.608201, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.608261, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.608322, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.608382, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.608444, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.608506, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.608577, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.608644, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.608705, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.608768, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.608850, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.608915, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.608977, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.609039, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.609106, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.609170, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.609233, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.609297, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.609371, 5] smbd/files.c:464(file_free) > freed files structure 8564 (1 used) >[2011/12/15 11:33:48.609433, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.609504, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.609588, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.609667, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.609736, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.609851, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.609961, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.610197, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.610260, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.610321, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.610389, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.610462, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.610522, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.612657, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.612719, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.612779, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.612841, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.612903, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.612939, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4225 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.613254, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.616292, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.616364, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.616425, 3] smbd/process.c:1661(process_smb) > Transaction 67 of length 112 (0 toread) >[2011/12/15 11:33:48.616485, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.616521, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4289 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.617416, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.617547, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.617610, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.617673, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.617740, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.617803, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.617869, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.617938, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.617999, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.618061, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.618128, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.618197, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.618257, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.618318, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.618387, 5] smbd/files.c:126(file_new) > allocated file structure 4469, fnum = 8565 (2 used) >[2011/12/15 11:33:48.618463, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.618527, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.618589, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.618655, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.618724, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.618784, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.618845, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.618905, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.618967, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.619029, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.619118, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.619185, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.619246, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.619309, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.619391, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.619456, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.619518, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.619580, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.619647, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.619711, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.619774, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.619839, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.619913, 5] smbd/files.c:464(file_free) > freed files structure 8565 (1 used) >[2011/12/15 11:33:48.619975, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.620040, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.620124, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.620186, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.620254, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.620368, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.620479, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.620714, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.620776, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.620837, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.620905, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.620969, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.621029, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.623200, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.623263, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.623324, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.623385, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.623448, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.623484, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4289 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.623799, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.625814, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.625886, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.625947, 3] smbd/process.c:1661(process_smb) > Transaction 68 of length 112 (0 toread) >[2011/12/15 11:33:48.626007, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.626043, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4353 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.626930, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.627055, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.627118, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.627181, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.627247, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.627311, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.627377, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.627446, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.627507, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.627569, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.627654, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.627723, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.627783, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.627845, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.627914, 5] smbd/files.c:126(file_new) > allocated file structure 4470, fnum = 8566 (2 used) >[2011/12/15 11:33:48.627981, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.628044, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.628106, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.628171, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.628240, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.628300, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.628361, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.628422, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.628483, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.628545, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.628617, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.628684, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.628744, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.628808, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.628889, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.628955, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.629017, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.629078, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.629146, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.629210, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.629273, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.629338, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.629411, 5] smbd/files.c:464(file_free) > freed files structure 8566 (1 used) >[2011/12/15 11:33:48.629478, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.629545, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.629647, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.629709, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.629777, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.629892, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.630003, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.630238, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.630300, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.630361, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.630430, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.630504, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.630564, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.632696, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.632759, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.632819, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.632880, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.632943, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.632979, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4353 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.633293, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.636336, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.636409, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.636470, 3] smbd/process.c:1661(process_smb) > Transaction 69 of length 112 (0 toread) >[2011/12/15 11:33:48.636530, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.636566, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4417 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.637464, 10] ../lib/util/util.c:415(dump_data) > [0000] 12 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.637591, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.637654, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.637717, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.637783, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.637847, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.637913, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.637982, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.638043, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.638104, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.638172, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.638240, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.638300, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.638362, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.638431, 5] smbd/files.c:126(file_new) > allocated file structure 4471, fnum = 8567 (2 used) >[2011/12/15 11:33:48.638507, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.638570, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.638632, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.638698, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.638766, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.638826, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.638887, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.638948, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.639009, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.639088, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.639160, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.639227, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.639288, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.639351, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.639434, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.639500, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.639562, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.639623, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.639691, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.639755, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.639817, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.639882, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.639956, 5] smbd/files.c:464(file_free) > freed files structure 8567 (1 used) >[2011/12/15 11:33:48.640018, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.640083, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.640167, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.640229, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.640297, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.640411, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.640522, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.640756, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.640819, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.640880, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.640948, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.641012, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.641072, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.643727, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.643826, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.643898, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.643975, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.644050, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.644093, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4417 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.644469, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.647232, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.647386, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.647461, 3] smbd/process.c:1661(process_smb) > Transaction 70 of length 112 (0 toread) >[2011/12/15 11:33:48.647533, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.647576, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4481 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.648618, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.648814, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.648892, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.648975, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.649058, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.649138, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.649221, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.649310, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.649383, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.649459, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.649577, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.649662, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.649735, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.649808, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.649896, 5] smbd/files.c:126(file_new) > allocated file structure 4472, fnum = 8568 (2 used) >[2011/12/15 11:33:48.649979, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.650056, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.650129, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.650209, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.650298, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.650371, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.650466, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.650542, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.650618, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.650694, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.650787, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.650877, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.650950, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.651028, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.651137, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.651217, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.651293, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.651367, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.651455, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.651533, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.651608, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.651689, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.651787, 5] smbd/files.c:464(file_free) > freed files structure 8568 (1 used) >[2011/12/15 11:33:48.651863, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.651975, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.652095, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.652170, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.652257, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.652418, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.652561, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.652864, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.652945, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.653017, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.653105, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.653184, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.653257, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.656046, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.656144, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.656216, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.656293, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.656368, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.656411, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4481 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.656787, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.659231, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.659384, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.659459, 3] smbd/process.c:1661(process_smb) > Transaction 71 of length 112 (0 toread) >[2011/12/15 11:33:48.659531, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.659574, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4545 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.660650, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.660846, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.660923, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.661005, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.661089, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.661169, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.661253, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.661343, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.661416, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.661494, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.661580, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.661663, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.661734, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.661808, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.661896, 5] smbd/files.c:126(file_new) > allocated file structure 4473, fnum = 8569 (2 used) >[2011/12/15 11:33:48.661978, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.662055, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.662129, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.662209, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.662296, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.662369, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.662442, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.662542, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.662648, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.662724, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.662818, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.662909, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.662981, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.663059, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.663168, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.663248, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.663324, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.663399, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.663487, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.663566, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.663641, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.663722, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.663820, 5] smbd/files.c:464(file_free) > freed files structure 8569 (1 used) >[2011/12/15 11:33:48.663896, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.663978, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.664095, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.664169, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.664254, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.664414, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.664557, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.664859, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.664941, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.665014, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.665102, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.665181, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.665286, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.668079, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.668179, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.668250, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.668327, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.668403, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.668446, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4545 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.668822, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.672002, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.672133, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.672196, 3] smbd/process.c:1661(process_smb) > Transaction 72 of length 112 (0 toread) >[2011/12/15 11:33:48.672257, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.672293, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4609 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.673170, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.673298, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.673362, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.673430, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.673503, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.673570, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.673639, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.673711, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.673772, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.673834, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.673927, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.673996, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.674057, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.674118, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.674189, 5] smbd/files.c:126(file_new) > allocated file structure 4474, fnum = 8570 (2 used) >[2011/12/15 11:33:48.674257, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.674322, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.674384, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.674459, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.674529, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.674589, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.674650, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.674711, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.674773, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.674836, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.674909, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.674983, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.675044, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.675107, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.675190, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.675256, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.675319, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.675381, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.675452, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.675516, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.675579, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.675645, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.675720, 5] smbd/files.c:464(file_free) > freed files structure 8570 (1 used) >[2011/12/15 11:33:48.675782, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.675865, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.675960, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.676022, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.676092, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.676215, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.676328, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.676565, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.676629, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.676690, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.676761, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.676825, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.676886, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.679043, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.679107, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.679167, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.679229, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.679292, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.679329, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4609 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.679644, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.682554, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.682626, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.682686, 3] smbd/process.c:1661(process_smb) > Transaction 73 of length 112 (0 toread) >[2011/12/15 11:33:48.682747, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.682783, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4673 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.683676, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.683802, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.683865, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.683928, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.683995, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.684058, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.684124, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.684193, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.684254, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.684316, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.684383, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.684452, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.684512, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.684573, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.684642, 5] smbd/files.c:126(file_new) > allocated file structure 4475, fnum = 8571 (2 used) >[2011/12/15 11:33:48.684709, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.684772, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.684834, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.684900, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.684968, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.685028, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.685088, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.685166, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.685228, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.685289, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.685361, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.685429, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.685494, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.685557, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.685639, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.685704, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.685766, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.685828, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.685896, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.685960, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.686023, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.686090, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.686164, 5] smbd/files.c:464(file_free) > freed files structure 8571 (1 used) >[2011/12/15 11:33:48.686226, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.686292, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.686376, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.686437, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.686515, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.686630, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.686739, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.686975, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.687038, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.687099, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.687167, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.687249, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.687311, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.689449, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.689514, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.689575, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.689636, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.689698, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.689734, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4673 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.690050, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.692066, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.692139, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.692199, 3] smbd/process.c:1661(process_smb) > Transaction 74 of length 112 (0 toread) >[2011/12/15 11:33:48.692260, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.692296, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4737 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.693175, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.693300, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.693363, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.693426, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.693497, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.693561, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.693627, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.693696, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.693757, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.693836, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.693905, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.693973, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.694033, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.694095, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.694164, 5] smbd/files.c:126(file_new) > allocated file structure 4476, fnum = 8572 (2 used) >[2011/12/15 11:33:48.694231, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.694295, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.694357, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.694422, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.694500, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.694561, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.694622, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.694682, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.694744, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.694806, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.694878, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.694945, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.695005, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.695068, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.695150, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.695216, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.695278, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.695339, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.695407, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.695471, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.695533, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.695598, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.695672, 5] smbd/files.c:464(file_free) > freed files structure 8572 (1 used) >[2011/12/15 11:33:48.695734, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.695817, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.695902, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.695964, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.696032, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.696147, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.696257, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.696492, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.696555, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.696616, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.696684, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.696748, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.696808, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.698955, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.699019, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.699079, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.699140, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.699203, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.699239, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4737 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.699554, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.701539, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.701611, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.701672, 3] smbd/process.c:1661(process_smb) > Transaction 75 of length 112 (0 toread) >[2011/12/15 11:33:48.701732, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.701768, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4801 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.702672, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.702799, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.702861, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.702925, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.702991, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.703054, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.703120, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.703190, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.703250, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.703312, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.703380, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.703448, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.703508, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.703569, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.703638, 5] smbd/files.c:126(file_new) > allocated file structure 4477, fnum = 8573 (2 used) >[2011/12/15 11:33:48.703705, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.703768, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.703830, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.703896, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.703965, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.704024, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.704100, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.704163, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.704224, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.704286, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.704358, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.704425, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.704485, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.704548, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.704630, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.704696, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.704757, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.704819, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.704886, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.704950, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.705013, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.705078, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.705152, 5] smbd/files.c:464(file_free) > freed files structure 8573 (1 used) >[2011/12/15 11:33:48.705214, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.705279, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.705363, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.705424, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.705497, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.705612, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.705722, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.705957, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.706020, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.706081, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.706149, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.706230, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.706292, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.708437, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.708499, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.708559, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.708621, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.708683, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.708719, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4801 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.709035, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.712069, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.712141, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.712202, 3] smbd/process.c:1661(process_smb) > Transaction 76 of length 112 (0 toread) >[2011/12/15 11:33:48.712262, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.712298, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4865 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.713174, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.713299, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.713362, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.713425, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.713495, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.713559, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.713625, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.713694, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.713772, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.713835, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.713903, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.713971, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.714031, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.714093, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.714162, 5] smbd/files.c:126(file_new) > allocated file structure 4478, fnum = 8574 (2 used) >[2011/12/15 11:33:48.714229, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.714292, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.714354, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.714419, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.714497, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.714557, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.714618, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.714678, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.714740, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.714802, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.714873, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.714941, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.715001, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.715064, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.715146, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.715212, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.715274, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.715335, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.715403, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.715467, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.715530, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.715594, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.715668, 5] smbd/files.c:464(file_free) > freed files structure 8574 (1 used) >[2011/12/15 11:33:48.715748, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.715813, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.715898, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.715959, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.716027, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.716142, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.716252, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.716486, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.716549, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.716610, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.716678, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.716742, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.716803, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.718955, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.719018, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.719078, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.719140, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.719202, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.719238, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4865 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.719554, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.722613, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.722686, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.722746, 3] smbd/process.c:1661(process_smb) > Transaction 77 of length 112 (0 toread) >[2011/12/15 11:33:48.722807, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.722860, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4929 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.723737, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.723862, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.723924, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.723988, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.724054, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.724118, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.724184, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.724253, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.724313, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.724375, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.724443, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.724511, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.724571, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.724632, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.724702, 5] smbd/files.c:126(file_new) > allocated file structure 4479, fnum = 8575 (2 used) >[2011/12/15 11:33:48.724768, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.724831, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.724893, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.724958, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.725027, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.725104, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.725166, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.725227, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.725288, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.725350, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.725422, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.725493, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.725554, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.725617, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.725700, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.725765, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.725827, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.725889, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.725957, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.726021, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.726084, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.726149, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.726223, 5] smbd/files.c:464(file_free) > freed files structure 8575 (1 used) >[2011/12/15 11:33:48.726285, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.726350, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.726434, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.726506, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.726574, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.726690, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.726799, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.727034, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.727097, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.727158, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.727243, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.727309, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.727370, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.729513, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.729576, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.729636, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.729698, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.729760, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.729796, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4929 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.730112, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.733128, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.733199, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.733260, 3] smbd/process.c:1661(process_smb) > Transaction 78 of length 112 (0 toread) >[2011/12/15 11:33:48.733320, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.733356, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4993 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.734240, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.734366, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.734428, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.734501, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.734567, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.734631, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.734697, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.734766, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.734843, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.734905, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.734973, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.735041, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.735101, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.735162, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.735232, 5] smbd/files.c:126(file_new) > allocated file structure 4480, fnum = 8576 (2 used) >[2011/12/15 11:33:48.735299, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.735362, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.735424, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.735489, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.735558, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.735618, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.735679, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.735739, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.735801, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.735862, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.735934, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.736001, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.736061, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.736124, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.736206, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.736272, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.736334, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.736395, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.736463, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.736526, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.736589, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.736654, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.736744, 5] smbd/files.c:464(file_free) > freed files structure 8576 (1 used) >[2011/12/15 11:33:48.736807, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.736872, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.736956, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.737017, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.737085, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.737200, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.737311, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.737551, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.737614, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.737675, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.737743, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.737807, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.737868, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.740014, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.740077, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.740137, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.740198, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.740260, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.740296, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=4993 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.740611, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.743804, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.743963, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.744039, 3] smbd/process.c:1661(process_smb) > Transaction 79 of length 112 (0 toread) >[2011/12/15 11:33:48.744144, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.744188, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5057 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.745232, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.745427, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.745506, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.745590, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.745672, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.745753, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.745836, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.745926, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.745999, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.746073, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.746159, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.746242, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.746314, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.746388, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.746498, 5] smbd/files.c:126(file_new) > allocated file structure 4481, fnum = 8577 (2 used) >[2011/12/15 11:33:48.746581, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.746659, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.746732, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.746814, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.746900, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.747004, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.747077, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.747151, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.747226, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.747301, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.747395, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.747485, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.747558, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.747636, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.747747, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.747827, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.747902, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.747977, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.748064, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.748143, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.748219, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.748299, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.748397, 5] smbd/files.c:464(file_free) > freed files structure 8577 (1 used) >[2011/12/15 11:33:48.748474, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.748555, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.748674, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.748748, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.748834, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.748995, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.749137, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.749437, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.749518, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.749591, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.749714, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.749795, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.749867, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.752596, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.752695, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.752768, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.752845, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.752922, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.752966, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5057 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.753345, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.755781, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.755939, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.756013, 3] smbd/process.c:1661(process_smb) > Transaction 80 of length 112 (0 toread) >[2011/12/15 11:33:48.756085, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.756127, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5121 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.757166, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.757357, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.757435, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.757519, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.757602, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.757682, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.757765, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.757889, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.757963, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.758038, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.758123, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.758205, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.758277, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.758350, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.758439, 5] smbd/files.c:126(file_new) > allocated file structure 4482, fnum = 8578 (2 used) >[2011/12/15 11:33:48.758549, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.758627, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.758701, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.758782, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.758870, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.758943, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.759016, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.759090, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.759165, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.759240, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.759334, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.759425, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.759498, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.759575, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.759683, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.759764, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.759839, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.759914, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.760002, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.760080, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.760156, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.760265, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.760366, 5] smbd/files.c:464(file_free) > freed files structure 8578 (1 used) >[2011/12/15 11:33:48.760443, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.760524, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.760642, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.760717, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.760803, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.760963, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.761106, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.761407, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.761489, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.761562, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.761650, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.761729, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.761801, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.765787, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.765892, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.765965, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.766042, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.766118, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.766161, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5121 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.766558, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.768812, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.768965, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.769071, 3] smbd/process.c:1661(process_smb) > Transaction 81 of length 112 (0 toread) >[2011/12/15 11:33:48.769145, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.769188, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5185 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.770107, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.770238, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.770302, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.770372, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.770440, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.770519, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.770589, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.770662, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.770723, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.770786, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.770855, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.770924, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.770984, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.771046, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.771117, 5] smbd/files.c:126(file_new) > allocated file structure 4483, fnum = 8579 (2 used) >[2011/12/15 11:33:48.771186, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.771250, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.771313, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.771379, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.771473, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.771535, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.771596, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.771657, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.771719, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.771781, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.771855, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.771929, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.771989, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.772054, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.772137, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.772203, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.772266, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.772328, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.772400, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.772464, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.772528, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.772594, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.772668, 5] smbd/files.c:464(file_free) > freed files structure 8579 (1 used) >[2011/12/15 11:33:48.772730, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.772797, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.772890, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.772952, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.773022, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.773147, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.773261, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.773503, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.773567, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.773648, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.773722, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.773787, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.773847, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.776031, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.776096, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.776157, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.776219, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.776282, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.776330, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5185 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.776788, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.779510, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.779585, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.779647, 3] smbd/process.c:1661(process_smb) > Transaction 82 of length 112 (0 toread) >[2011/12/15 11:33:48.779707, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.779743, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5249 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.780620, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.780746, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.780808, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.780873, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.780939, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.781003, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.781087, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.781158, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.781219, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.781281, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.781349, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.781418, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.781483, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.781544, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.781614, 5] smbd/files.c:126(file_new) > allocated file structure 4484, fnum = 8580 (2 used) >[2011/12/15 11:33:48.781681, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.781745, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.781807, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.781872, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.781941, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.782001, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.782062, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.782123, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.782184, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.782246, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.782319, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.782387, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.782456, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.782521, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.782603, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.782669, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.782731, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.782793, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.782861, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.782925, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.782989, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.783072, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.783147, 5] smbd/files.c:464(file_free) > freed files structure 8580 (1 used) >[2011/12/15 11:33:48.783209, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.783275, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.783360, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.783422, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.783491, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.783607, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.783718, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.783953, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.784017, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.784078, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.784146, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.784210, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.784270, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.786413, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.786486, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.786546, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.786608, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.786670, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.786706, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5249 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.787022, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.789024, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.789111, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.789174, 3] smbd/process.c:1661(process_smb) > Transaction 83 of length 112 (0 toread) >[2011/12/15 11:33:48.789235, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.789271, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5313 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.790155, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.790280, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.790343, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.790406, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.790481, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.790545, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.790611, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.790680, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.790740, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.790802, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.790870, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.790938, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.790998, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.791060, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.791129, 5] smbd/files.c:126(file_new) > allocated file structure 4485, fnum = 8581 (2 used) >[2011/12/15 11:33:48.791196, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.791260, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.791322, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.791404, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.791474, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.791534, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.791595, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.791656, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.791718, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.791780, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.791851, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.791919, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.791979, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.792042, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.792124, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.792189, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.792252, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.792313, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.792381, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.792445, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.792508, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.792572, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.792646, 5] smbd/files.c:464(file_free) > freed files structure 8581 (1 used) >[2011/12/15 11:33:48.792708, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.792774, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.792858, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.792919, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.792987, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.793102, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.793213, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.793448, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.793533, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.793596, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.793664, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.793728, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.793788, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.795933, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.795996, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.796056, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.796117, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.796180, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.796216, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5313 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.796531, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.798517, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.798589, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.798650, 3] smbd/process.c:1661(process_smb) > Transaction 84 of length 112 (0 toread) >[2011/12/15 11:33:48.798710, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.798746, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5377 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.799622, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.799748, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.799810, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.799873, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.799939, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.800003, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.800087, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.800157, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.800217, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.800279, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.800347, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.800415, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.800475, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.800536, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.800605, 5] smbd/files.c:126(file_new) > allocated file structure 4486, fnum = 8582 (2 used) >[2011/12/15 11:33:48.800672, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.800735, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.800797, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.800862, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.800931, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.800991, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.801052, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.801113, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.801174, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.801236, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.801308, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.801375, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.801435, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.801504, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.801587, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.801652, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.801714, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.801775, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.801843, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.801907, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.801988, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.802052, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.802126, 5] smbd/files.c:464(file_free) > freed files structure 8582 (1 used) >[2011/12/15 11:33:48.802188, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.802254, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.802338, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.802399, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.802477, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.802593, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.802703, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.802938, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.803001, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.803062, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.803130, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.803194, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.803254, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.805389, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.805455, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.805517, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.805578, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.805641, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.805677, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5377 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.805993, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.808950, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.809038, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.809099, 3] smbd/process.c:1661(process_smb) > Transaction 85 of length 112 (0 toread) >[2011/12/15 11:33:48.809159, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.809195, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5441 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.810078, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.810204, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.810267, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.810329, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.810396, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.810468, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.810535, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.810604, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.810664, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.810726, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.810793, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.810862, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.810922, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.810983, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.811052, 5] smbd/files.c:126(file_new) > allocated file structure 4487, fnum = 8583 (2 used) >[2011/12/15 11:33:48.811119, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.811182, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.811244, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.811327, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.811396, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.811456, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.811517, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.811578, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.811640, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.811702, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.811773, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.811840, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.811901, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.811964, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.812046, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.812112, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.812174, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.812235, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.812303, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.812367, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.812430, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.812494, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.812568, 5] smbd/files.c:464(file_free) > freed files structure 8583 (1 used) >[2011/12/15 11:33:48.812630, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.812695, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.812779, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.812841, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.812909, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.813024, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.813134, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.813370, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.813455, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.813519, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.813586, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.813650, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.813710, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.815854, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.815917, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.815978, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.816039, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.816101, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.816137, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5441 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.816453, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.819551, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.819624, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.819685, 3] smbd/process.c:1661(process_smb) > Transaction 86 of length 112 (0 toread) >[2011/12/15 11:33:48.819745, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.819781, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5505 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.820659, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.820784, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.820847, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.820910, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.820976, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.821056, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.821122, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.821191, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.821252, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.821313, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.821381, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.821453, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.821516, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.821577, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.821646, 5] smbd/files.c:126(file_new) > allocated file structure 4488, fnum = 8584 (2 used) >[2011/12/15 11:33:48.821713, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.821776, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.821838, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.821903, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.821972, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.822032, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.822092, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.822153, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.822214, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.822287, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.822363, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.822431, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.822501, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.822565, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.822647, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.822712, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.822774, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.822836, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.822904, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.822983, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.823048, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.823113, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.823187, 5] smbd/files.c:464(file_free) > freed files structure 8584 (1 used) >[2011/12/15 11:33:48.823250, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.823315, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.823400, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.823461, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.823529, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.823645, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.823755, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.823990, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.824053, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.824114, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.824182, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.824246, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.824306, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.826453, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.826518, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.826578, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.826639, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.826702, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.826738, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5505 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.827069, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.830129, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.830201, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.830262, 3] smbd/process.c:1661(process_smb) > Transaction 87 of length 112 (0 toread) >[2011/12/15 11:33:48.830323, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.830358, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5569 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.831245, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.831370, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.831433, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.831496, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.831563, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.831626, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.831692, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.831761, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.831821, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.831883, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.831951, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.832019, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.832079, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.832140, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.832209, 5] smbd/files.c:126(file_new) > allocated file structure 4489, fnum = 8585 (2 used) >[2011/12/15 11:33:48.832276, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.832339, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.832401, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.832485, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.832553, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.832613, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.832674, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.832734, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.832796, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.832858, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.832929, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.832996, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.833056, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.833119, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.833201, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.833267, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.833329, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.833390, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.833462, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.833527, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.833590, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.833655, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.833729, 5] smbd/files.c:464(file_free) > freed files structure 8585 (1 used) >[2011/12/15 11:33:48.833791, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.833857, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.833941, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.834002, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.834071, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.834185, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.834296, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.834558, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.834622, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.834683, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.834751, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.834815, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.834875, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.837016, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.837078, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.837139, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.837200, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.837263, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.837299, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5569 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.837620, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.839629, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.839700, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.839761, 3] smbd/process.c:1661(process_smb) > Transaction 88 of length 112 (0 toread) >[2011/12/15 11:33:48.839821, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.839857, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5633 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.840809, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.840990, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.841068, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.841151, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.841264, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.841344, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.841428, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.841519, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.841593, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.841668, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.841753, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.841836, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.841907, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.841981, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.842068, 5] smbd/files.c:126(file_new) > allocated file structure 4490, fnum = 8586 (2 used) >[2011/12/15 11:33:48.842150, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.842228, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.842303, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.842384, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.842494, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.842567, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.842640, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.842714, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.842788, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.842863, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.842957, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.843047, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.843120, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.843197, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.843307, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.843388, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.843464, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.843538, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.843657, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.843737, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.843812, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.843893, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.843992, 5] smbd/files.c:464(file_free) > freed files structure 8586 (1 used) >[2011/12/15 11:33:48.844068, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.844150, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.844267, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.844343, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.844429, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.844590, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.844735, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.845037, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.845116, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.845189, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.845278, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.845356, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.845428, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.848130, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.848229, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.848302, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.848378, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.848454, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.848497, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5633 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.848903, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.851794, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.851949, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.852024, 3] smbd/process.c:1661(process_smb) > Transaction 89 of length 112 (0 toread) >[2011/12/15 11:33:48.852096, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.852140, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5697 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.853186, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.853382, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.853461, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.853546, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.853628, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.853709, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.853792, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.853882, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.853955, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.854030, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.854114, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.854197, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.854270, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.854354, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.854476, 5] smbd/files.c:126(file_new) > allocated file structure 4491, fnum = 8587 (2 used) >[2011/12/15 11:33:48.854572, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.854664, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.854778, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.854872, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.854961, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.855048, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.855125, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.855197, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.855272, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.855346, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.855439, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.855529, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.855603, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.855681, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.855790, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.855870, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.855945, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.856019, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.856107, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.856186, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.856262, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.856342, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.856439, 5] smbd/files.c:464(file_free) > freed files structure 8587 (1 used) >[2011/12/15 11:33:48.856516, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.856597, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.856714, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.856789, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.856875, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.857035, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.857179, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.857516, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.857599, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.857672, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.857760, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.857840, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.857911, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.860618, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.860716, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.860789, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.860867, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.860942, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.860986, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5697 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.861363, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.863804, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.863958, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.864032, 3] smbd/process.c:1661(process_smb) > Transaction 90 of length 112 (0 toread) >[2011/12/15 11:33:48.864104, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.864148, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5761 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.865194, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.865391, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.865471, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.865553, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.865666, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.865748, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.865832, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.865922, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.865994, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.866069, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.866154, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.866238, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.866310, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.866384, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.866496, 5] smbd/files.c:126(file_new) > allocated file structure 4492, fnum = 8588 (2 used) >[2011/12/15 11:33:48.866579, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.866657, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.866731, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.866813, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.866901, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.866974, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.867046, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.867121, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.867196, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.867272, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.867367, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.867457, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.867530, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.867608, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.867718, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.867798, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.867874, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.867948, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.868067, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.868148, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.868225, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.868306, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.868407, 5] smbd/files.c:464(file_free) > freed files structure 8588 (1 used) >[2011/12/15 11:33:48.868484, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.868565, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.868682, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.868757, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.868844, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.868982, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.869097, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.869335, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.869399, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.869465, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.869539, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.869604, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.869665, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.871831, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.871903, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.871964, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.872028, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.872091, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.872128, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5761 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.872463, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.874542, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.874616, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.874677, 3] smbd/process.c:1661(process_smb) > Transaction 91 of length 112 (0 toread) >[2011/12/15 11:33:48.874738, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.874774, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5825 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.875653, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.875780, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.875843, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.875911, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.875978, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.876043, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.876111, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.876184, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.876245, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.876308, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.876376, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.876445, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.876505, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.876567, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.876637, 5] smbd/files.c:126(file_new) > allocated file structure 4493, fnum = 8589 (2 used) >[2011/12/15 11:33:48.876705, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.876787, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.876851, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.876917, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.876986, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.877047, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.877108, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.877169, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.877231, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.877294, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.877367, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.877439, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.877506, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.877571, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.877654, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.877720, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.877783, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.877845, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.877914, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.877978, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.878042, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.878107, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.878181, 5] smbd/files.c:464(file_free) > freed files structure 8589 (1 used) >[2011/12/15 11:33:48.878243, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.878309, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.878395, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.878467, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.878536, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.878651, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.878761, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.879016, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.879080, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.879141, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.879209, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.879273, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.879333, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.881482, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.881545, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.881606, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.881667, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.881730, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.881766, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5825 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.882083, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.884041, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.884112, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.884173, 3] smbd/process.c:1661(process_smb) > Transaction 92 of length 112 (0 toread) >[2011/12/15 11:33:48.884233, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.884269, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5889 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.885150, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.885275, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.885338, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.885402, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.885492, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.885556, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.885622, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.885691, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.885752, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.885814, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.885882, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.885950, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.886011, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.886072, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.886141, 5] smbd/files.c:126(file_new) > allocated file structure 4494, fnum = 8590 (2 used) >[2011/12/15 11:33:48.886208, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.886272, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.886334, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.886399, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.886478, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.886539, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.886600, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.886661, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.886723, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.886785, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.886857, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.886924, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.886985, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.887048, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.887130, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.887195, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.887258, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.887335, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.887404, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.887468, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.887532, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.887596, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.887670, 5] smbd/files.c:464(file_free) > freed files structure 8590 (1 used) >[2011/12/15 11:33:48.887733, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.887798, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.887883, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.887945, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.888013, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.888127, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.888238, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.888473, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.888537, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.888598, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.888666, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.888730, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.888790, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.890945, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.891009, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.891069, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.891130, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.891193, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.891247, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5889 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.891564, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.894638, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.894710, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.894771, 3] smbd/process.c:1661(process_smb) > Transaction 93 of length 112 (0 toread) >[2011/12/15 11:33:48.894832, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.894868, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5953 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.895746, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.895872, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.895935, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.895999, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.896065, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.896128, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.896194, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.896264, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.896324, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.896386, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.896454, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.896522, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.896582, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.896644, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.896713, 5] smbd/files.c:126(file_new) > allocated file structure 4495, fnum = 8591 (2 used) >[2011/12/15 11:33:48.896780, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.896861, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.896924, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.896990, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.897058, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.897118, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.897178, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.897239, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.897301, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.897362, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.897434, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.897507, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.897568, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.897631, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.897713, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.897779, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.897841, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.897902, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.897970, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.898034, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.898097, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.898162, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.898235, 5] smbd/files.c:464(file_free) > freed files structure 8591 (1 used) >[2011/12/15 11:33:48.898297, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.898363, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.898455, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.898517, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.898586, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.898700, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.898810, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.899065, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.899129, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.899190, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.899258, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.899322, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.899382, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.901533, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.901596, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.901656, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.901718, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.901780, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.901816, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=5953 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.902132, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.905150, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.905222, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.905283, 3] smbd/process.c:1661(process_smb) > Transaction 94 of length 112 (0 toread) >[2011/12/15 11:33:48.905343, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.905379, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6017 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.906267, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.906393, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.906465, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.906548, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.906614, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.906678, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.906745, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.906814, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.906874, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.906936, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.907004, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.907073, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.907133, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.907194, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.907264, 5] smbd/files.c:126(file_new) > allocated file structure 4496, fnum = 8592 (2 used) >[2011/12/15 11:33:48.907331, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.907394, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.907457, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.907522, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.907590, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.907650, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.907711, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.907772, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.907834, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.907896, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.907968, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.908035, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.908095, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.908158, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.908240, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.908306, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.908368, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.908447, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.908515, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.908579, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.908642, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.908707, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.908781, 5] smbd/files.c:464(file_free) > freed files structure 8592 (1 used) >[2011/12/15 11:33:48.908843, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.908909, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.908993, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.909055, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.909123, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.909238, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.909348, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.909590, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.909653, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.909714, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.909783, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.909847, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.909907, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.912058, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.912121, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.912182, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.912243, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.912323, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.912360, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6017 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.912676, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.914654, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.914726, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.914787, 3] smbd/process.c:1661(process_smb) > Transaction 95 of length 112 (0 toread) >[2011/12/15 11:33:48.914848, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.914884, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6081 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.915763, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.915889, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.915951, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.916015, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.916081, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.916145, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.916211, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.916281, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.916341, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.916403, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.916471, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.916539, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.916599, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.916661, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.916730, 5] smbd/files.c:126(file_new) > allocated file structure 4497, fnum = 8593 (2 used) >[2011/12/15 11:33:48.916815, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.916878, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.916941, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.917006, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.917075, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.917136, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.917197, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.917257, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.917319, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.917381, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.917458, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.917527, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.917588, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.917651, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.917733, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.917799, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.917861, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.917922, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.917990, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.918054, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.918116, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.918181, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.918255, 5] smbd/files.c:464(file_free) > freed files structure 8593 (1 used) >[2011/12/15 11:33:48.918317, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.918383, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.918476, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.918538, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.918606, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.918720, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.918830, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.919083, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.919146, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.919207, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.919275, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.919339, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.919399, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.921545, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.921608, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.921669, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.921730, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.921793, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.921829, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6081 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.922145, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.925181, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.925252, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.925313, 3] smbd/process.c:1661(process_smb) > Transaction 96 of length 112 (0 toread) >[2011/12/15 11:33:48.925373, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.925409, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6145 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.926294, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.926420, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.926510, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.926576, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.926642, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.926706, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.926772, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.926842, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.926902, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.926964, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.927032, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.927101, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.927161, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.927222, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.927292, 5] smbd/files.c:126(file_new) > allocated file structure 4498, fnum = 8594 (2 used) >[2011/12/15 11:33:48.927359, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.927422, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.927484, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.927550, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.927619, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.927679, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.927740, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.927801, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.927863, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.927925, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.927997, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.928064, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.928125, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.928188, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.928270, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.928336, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.928415, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.928477, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.928545, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.928609, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.928673, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.928737, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.928811, 5] smbd/files.c:464(file_free) > freed files structure 8594 (1 used) >[2011/12/15 11:33:48.928874, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.928939, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.929023, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.929085, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.929153, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.929267, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.929377, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.929620, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.929683, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.929745, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.929813, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.929877, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.929937, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.932082, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.932146, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.932206, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.932284, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.932348, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.932384, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6145 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.932700, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.934677, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.934749, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.934810, 3] smbd/process.c:1661(process_smb) > Transaction 97 of length 112 (0 toread) >[2011/12/15 11:33:48.934871, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.934907, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6209 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.935787, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.935912, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.935975, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.936039, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.936105, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.936168, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.936235, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.936304, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.936365, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.936427, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.936495, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.936563, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.936623, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.936685, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.936772, 5] smbd/files.c:126(file_new) > allocated file structure 4499, fnum = 8595 (2 used) >[2011/12/15 11:33:48.936839, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.936902, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.936964, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.937029, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.937098, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.937159, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.937219, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.937280, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.937342, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.937404, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.937482, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.937550, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.937610, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.937674, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.937756, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.937822, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.937884, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.937946, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.938013, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.938077, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.938140, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.938205, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.938279, 5] smbd/files.c:464(file_free) > freed files structure 8595 (1 used) >[2011/12/15 11:33:48.938342, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.938407, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.938499, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.938561, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.938629, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.938743, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.938870, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.939108, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.939171, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.939232, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.939299, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.939363, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.939423, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.941980, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.942080, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.942153, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.942229, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.942305, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.942348, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6209 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.942751, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.945543, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.945696, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.945772, 3] smbd/process.c:1661(process_smb) > Transaction 98 of length 112 (0 toread) >[2011/12/15 11:33:48.945844, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.945887, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6273 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.946955, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.947182, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.947263, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.947345, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.947428, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.947509, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.947592, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.947682, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.947754, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.947829, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.947914, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.947998, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.948070, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.948143, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.948232, 5] smbd/files.c:126(file_new) > allocated file structure 4500, fnum = 8596 (2 used) >[2011/12/15 11:33:48.948314, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.948392, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.948467, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.948548, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.948634, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.948706, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.948780, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.948853, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.948927, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.949003, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.949096, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.949187, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.949261, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.949338, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.949449, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.949563, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.949640, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.949715, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.949805, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.949884, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.949959, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.950039, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.950139, 5] smbd/files.c:464(file_free) > freed files structure 8596 (1 used) >[2011/12/15 11:33:48.950215, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.950296, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.950414, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.950511, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.950598, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.950758, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.950903, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.951204, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.951285, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.951358, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.951445, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.951524, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.951595, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.954352, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.954475, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.954590, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.954669, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.954745, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.954787, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6273 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.955164, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.957560, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.957713, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.957787, 3] smbd/process.c:1661(process_smb) > Transaction 99 of length 112 (0 toread) >[2011/12/15 11:33:48.957859, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.957902, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6337 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.958972, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.959168, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.959246, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.959329, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.959413, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.959493, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.959576, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.959666, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.959739, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.959814, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.959899, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.959983, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.960055, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.960129, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.960249, 5] smbd/files.c:126(file_new) > allocated file structure 4501, fnum = 8597 (2 used) >[2011/12/15 11:33:48.960333, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.960412, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.960486, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.960567, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.960656, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.960728, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.960801, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.960876, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.960952, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.961027, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.961121, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.961211, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.961285, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.961363, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.961476, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.961557, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.961633, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.961707, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.961795, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.961874, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.961949, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.962031, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.962130, 5] smbd/files.c:464(file_free) > freed files structure 8597 (1 used) >[2011/12/15 11:33:48.962207, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.962289, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.962407, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.962502, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.962589, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.962750, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.962933, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.963237, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.963316, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.963390, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.963479, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.963557, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.963629, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.966312, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.966411, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.966506, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.966583, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.966660, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.966704, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6337 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.967079, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.967169, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.967244, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:48.967315, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:48.967446, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:48.969476, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.969602, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.969665, 3] smbd/process.c:1661(process_smb) > Transaction 100 of length 112 (0 toread) >[2011/12/15 11:33:48.969726, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.969762, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6401 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.970688, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.970818, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.970883, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:48.970951, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:48.971037, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.971116, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:48.971184, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:48.971249, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:48.971490, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:48.971616, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:48.971689, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.971757, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.971823, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.971893, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.971967, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.972028, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.972090, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.972159, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.972228, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.972288, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.972350, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.972420, 5] smbd/files.c:126(file_new) > allocated file structure 4502, fnum = 8598 (2 used) >[2011/12/15 11:33:48.972488, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.972570, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.972633, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.972699, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.972769, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.972829, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.972890, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.972951, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.973013, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.973076, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.973149, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.973217, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ef58 >[2011/12/15 11:33:48.973278, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.973342, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.973424, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.973495, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0f0c8 >[2011/12/15 11:33:48.973558, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.973620, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.973691, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.973756, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.973820, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.973886, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.973960, 5] smbd/files.c:464(file_free) > freed files structure 8598 (1 used) >[2011/12/15 11:33:48.974023, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.974089, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.974182, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.974244, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.974313, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.974437, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.974560, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.974817, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.974881, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.974942, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.975011, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.975076, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.975137, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.977290, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.977354, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.977414, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.977481, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.977545, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.977581, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6401 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.977897, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.980210, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.980281, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.980341, 3] smbd/process.c:1661(process_smb) > Transaction 101 of length 112 (0 toread) >[2011/12/15 11:33:48.980402, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.980437, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6465 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.981313, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.981438, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.981507, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.981589, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.981657, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.981720, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.981787, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.981856, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.981917, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.981978, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.982046, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.982113, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.982174, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.982235, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.982304, 5] smbd/files.c:126(file_new) > allocated file structure 4503, fnum = 8599 (2 used) >[2011/12/15 11:33:48.982371, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.982435, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.982505, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.982571, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.982639, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.982699, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.982760, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.982820, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.982882, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.982944, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.983016, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.983083, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.983144, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.983206, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.983288, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.983354, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.983415, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.983495, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.983563, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.983627, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.983690, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.983755, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.983829, 5] smbd/files.c:464(file_free) > freed files structure 8599 (1 used) >[2011/12/15 11:33:48.983892, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.983957, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.984043, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.984105, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.984173, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.984288, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.984399, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.984637, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.984700, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.984761, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.984829, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.984893, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.984954, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.987113, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.987176, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.987236, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.987298, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.987378, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.987415, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6465 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.987730, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:48.990736, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:48.990809, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:48.990869, 3] smbd/process.c:1661(process_smb) > Transaction 102 of length 112 (0 toread) >[2011/12/15 11:33:48.990930, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.990966, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6529 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:48.991840, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:48.991965, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:48.992027, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:48.992091, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:48.992157, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:48.992221, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:48.992287, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.992356, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.992417, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.992478, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.992546, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.992615, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.992675, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.992736, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:48.992805, 5] smbd/files.c:126(file_new) > allocated file structure 4504, fnum = 8600 (2 used) >[2011/12/15 11:33:48.992891, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:48.992954, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:48.993016, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:48.993082, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:48.993151, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:48.993211, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:48.993272, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:48.993332, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:48.993394, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:48.993460, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:48.993533, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.993601, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:48.993661, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:48.993724, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.993806, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:48.993871, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:48.993933, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:48.993995, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:48.994063, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:48.994127, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:48.994190, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:48.994255, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:48.994329, 5] smbd/files.c:464(file_free) > freed files structure 8600 (1 used) >[2011/12/15 11:33:48.994392, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:48.994468, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:48.994553, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:48.994615, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.994683, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.994798, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:48.994910, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:48.995165, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:48.995228, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.995289, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:48.995357, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:48.995421, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:48.995482, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:48.997622, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.997686, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.997746, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.997807, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:48.997870, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:48.997906, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6529 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:48.998221, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.000208, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.000279, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.000340, 3] smbd/process.c:1661(process_smb) > Transaction 103 of length 112 (0 toread) >[2011/12/15 11:33:49.000400, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.000436, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6593 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.001312, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.001437, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.001523, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.001589, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.001655, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.001719, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.001786, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.001855, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.001916, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.001978, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.002046, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.002115, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.002175, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.002236, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.002306, 5] smbd/files.c:126(file_new) > allocated file structure 4505, fnum = 8601 (2 used) >[2011/12/15 11:33:49.002373, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.002436, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.002510, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.002575, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.002645, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.002705, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.002766, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.002827, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.002888, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.002951, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.003023, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.003090, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.003151, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.003214, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.003297, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.003363, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.003441, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.003503, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.003571, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.003635, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.003698, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.003763, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.003837, 5] smbd/files.c:464(file_free) > freed files structure 8601 (1 used) >[2011/12/15 11:33:49.003900, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.003966, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.004051, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.004113, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.004181, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.004296, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.004407, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.004643, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.004707, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.004768, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.004836, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.004900, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.004961, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.007112, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.007176, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.007236, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.007314, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.007378, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.007415, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6593 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.007731, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.010792, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.010865, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.010926, 3] smbd/process.c:1661(process_smb) > Transaction 104 of length 112 (0 toread) >[2011/12/15 11:33:49.010987, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.011023, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6657 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.011899, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.012025, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.012087, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.012151, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.012217, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.012281, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.012347, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.012417, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.012477, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.012539, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.012624, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.012717, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.012798, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.012883, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.013009, 5] smbd/files.c:126(file_new) > allocated file structure 4506, fnum = 8602 (2 used) >[2011/12/15 11:33:49.013101, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.014059, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.014139, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.014208, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.014282, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.014344, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.014405, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.014478, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.014541, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.014617, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.014691, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.014766, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.014827, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.014893, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.014977, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.015044, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.015107, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.015170, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.015240, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.015305, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.015369, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.015435, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.015510, 5] smbd/files.c:464(file_free) > freed files structure 8602 (1 used) >[2011/12/15 11:33:49.015573, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.015639, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.015756, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.015819, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.015888, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.016011, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.016181, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.016422, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.016486, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.016547, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.016618, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.016683, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.016744, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.018905, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.018969, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.019029, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.019092, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.019156, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.019192, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6657 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.019508, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.022383, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.022465, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.022528, 3] smbd/process.c:1661(process_smb) > Transaction 105 of length 112 (0 toread) >[2011/12/15 11:33:49.022588, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.022625, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6721 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.023501, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.023645, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.023711, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.023778, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.023846, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.023911, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.023977, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.024047, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.024108, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.024170, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.024238, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.024307, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.024367, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.024429, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.024499, 5] smbd/files.c:126(file_new) > allocated file structure 4507, fnum = 8603 (2 used) >[2011/12/15 11:33:49.024566, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.024630, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.024692, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.024758, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.024827, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.024887, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.024948, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.025009, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.025071, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.025133, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.025206, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.025273, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.025334, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.025398, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.025486, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.025571, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.025634, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.025696, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.025764, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.025828, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.025891, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.025957, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.026031, 5] smbd/files.c:464(file_free) > freed files structure 8603 (1 used) >[2011/12/15 11:33:49.026094, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.026160, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.026245, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.026307, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.026375, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.026501, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.026613, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.026850, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.026914, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.026976, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.027044, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.027108, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.027169, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.029316, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.029379, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.029461, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.029525, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.029589, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.029625, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6721 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.029942, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.032944, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.033015, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.033076, 3] smbd/process.c:1661(process_smb) > Transaction 106 of length 112 (0 toread) >[2011/12/15 11:33:49.033137, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.033173, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6785 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.034059, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.034185, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.034248, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.034312, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.034379, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.034451, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.034519, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.034589, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.034650, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.034712, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.034780, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.034848, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.034909, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.034971, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.035062, 5] smbd/files.c:126(file_new) > allocated file structure 4508, fnum = 8604 (2 used) >[2011/12/15 11:33:49.035130, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.035194, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.035256, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.035322, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.035391, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.035451, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.035512, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.035573, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.035635, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.035697, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.035769, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.035837, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.035897, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.035961, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.036043, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.036109, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.036171, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.036233, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.036301, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.036365, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.036428, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.036493, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.036567, 5] smbd/files.c:464(file_free) > freed files structure 8604 (1 used) >[2011/12/15 11:33:49.036630, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.036696, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.036781, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.036843, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.036911, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.037026, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.037153, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.037391, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.037459, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.037522, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.037590, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.037654, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.037715, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.039859, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.039923, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.039983, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.040045, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.040108, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.040144, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6785 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.040482, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.043526, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.043681, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.043756, 3] smbd/process.c:1661(process_smb) > Transaction 107 of length 112 (0 toread) >[2011/12/15 11:33:49.043827, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.043870, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6849 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.044913, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.045140, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.045218, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.045301, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.045385, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.045467, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.045551, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.045642, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.045716, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.045791, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.045876, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.045959, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.046031, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.046105, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.046194, 5] smbd/files.c:126(file_new) > allocated file structure 4509, fnum = 8605 (2 used) >[2011/12/15 11:33:49.046275, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.046352, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.046426, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.046532, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.046620, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.046693, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.046766, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.046841, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.046916, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.046992, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.047085, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.047177, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.047250, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.047328, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.047469, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.047552, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.047628, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.047703, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.047791, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.047869, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.047945, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.048026, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.048124, 5] smbd/files.c:464(file_free) > freed files structure 8605 (1 used) >[2011/12/15 11:33:49.048202, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.048284, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.048401, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.048477, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.048563, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.048726, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.048869, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.049172, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.049253, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.049327, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.049414, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.049495, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.049567, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.052276, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.052375, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.052479, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.052558, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.052633, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.052677, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6849 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.053054, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.055522, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.055681, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.055756, 3] smbd/process.c:1661(process_smb) > Transaction 108 of length 112 (0 toread) >[2011/12/15 11:33:49.055829, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.055872, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6913 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.056919, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.057115, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.057193, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.057275, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.057359, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.057439, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.057525, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.057614, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.057688, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.057763, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.057849, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.057934, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.058007, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.058081, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.058205, 5] smbd/files.c:126(file_new) > allocated file structure 4510, fnum = 8606 (2 used) >[2011/12/15 11:33:49.058287, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.058365, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.058439, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.058548, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.058638, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.058710, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.058784, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.058859, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.058934, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.059009, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.059103, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.059193, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.059266, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.059344, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.059455, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.059537, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.059614, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.059688, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.059776, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.059856, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.059932, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.060014, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.060113, 5] smbd/files.c:464(file_free) > freed files structure 8606 (1 used) >[2011/12/15 11:33:49.060190, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.060272, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.060389, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.060464, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.060549, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.060756, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.060936, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.061243, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.061327, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.061399, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.061490, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.061570, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.061642, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.064339, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.064438, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.064511, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.064588, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.064664, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.064708, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6913 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.065083, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.067503, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.067658, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.067733, 3] smbd/process.c:1661(process_smb) > Transaction 109 of length 112 (0 toread) >[2011/12/15 11:33:49.067805, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.067849, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6977 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.068846, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.069014, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.069079, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.069148, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.069217, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.069285, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.069354, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.069428, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.069496, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.069560, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.069629, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.069698, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.069759, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.069821, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.069892, 5] smbd/files.c:126(file_new) > allocated file structure 4511, fnum = 8607 (2 used) >[2011/12/15 11:33:49.069961, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.070026, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.070089, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.070155, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.070224, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.070285, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.070346, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.070408, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.070482, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.070546, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.070621, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.070694, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.070756, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.070837, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.070922, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.070989, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.071052, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.071114, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.071186, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.071251, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.071315, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.071381, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.071455, 5] smbd/files.c:464(file_free) > freed files structure 8607 (1 used) >[2011/12/15 11:33:49.071519, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.071586, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.071680, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.071742, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.071812, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.071935, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.072052, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.072331, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.072397, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.072458, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.072530, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.072595, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.072656, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.074822, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.074903, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.074965, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.075028, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.075092, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.075128, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=6977 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.075444, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.078169, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.078243, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.078305, 3] smbd/process.c:1661(process_smb) > Transaction 110 of length 112 (0 toread) >[2011/12/15 11:33:49.078365, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.078401, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7041 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.079289, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.079415, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.079478, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.079543, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.079610, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.079674, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.079741, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.079811, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.079872, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.079934, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.080002, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.080071, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.080132, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.080211, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.080283, 5] smbd/files.c:126(file_new) > allocated file structure 4512, fnum = 8608 (2 used) >[2011/12/15 11:33:49.080351, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.080415, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.080477, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.080543, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.080612, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.080673, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.080734, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.080795, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.080857, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.080920, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.080992, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.081060, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.081121, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.081185, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.081267, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.081333, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.081396, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.081462, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.081532, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.081596, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.081660, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.081725, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.081800, 5] smbd/files.c:464(file_free) > freed files structure 8608 (1 used) >[2011/12/15 11:33:49.081863, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.081929, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.082015, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.082077, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.082146, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.082279, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.082391, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.082638, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.082703, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.082764, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.082832, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.082897, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.082958, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.085096, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.085160, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.085220, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.085282, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.085345, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.085381, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7041 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.085703, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.087646, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.087718, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.087779, 3] smbd/process.c:1661(process_smb) > Transaction 111 of length 112 (0 toread) >[2011/12/15 11:33:49.087839, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.087876, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7105 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.088774, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.088900, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.088962, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.089026, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.089093, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.089157, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.089224, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.089293, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.089354, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.089416, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.089490, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.089558, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.089619, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.089681, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.089750, 5] smbd/files.c:126(file_new) > allocated file structure 4513, fnum = 8609 (2 used) >[2011/12/15 11:33:49.089817, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.089881, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.089943, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.090009, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.090077, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.090138, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.090199, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.090260, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.090322, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.090385, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.090466, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.090535, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.090596, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.090677, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.090759, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.090825, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.090887, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.090949, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.091017, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.091082, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.091145, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.091210, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.091285, 5] smbd/files.c:464(file_free) > freed files structure 8609 (1 used) >[2011/12/15 11:33:49.091348, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.091414, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.091499, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.091561, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.091629, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.091744, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.091855, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.092091, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.092155, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.092216, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.092284, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.092349, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.092410, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.094584, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.094650, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.094710, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.094772, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.094835, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.094871, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7105 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.095188, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.097168, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.097239, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.097300, 3] smbd/process.c:1661(process_smb) > Transaction 112 of length 112 (0 toread) >[2011/12/15 11:33:49.097361, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.097397, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7169 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.098283, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.098410, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.098482, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.098546, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.098612, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.098677, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.098743, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.098813, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.098874, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.098936, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.099004, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.099073, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.099134, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.099214, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.099285, 5] smbd/files.c:126(file_new) > allocated file structure 4514, fnum = 8610 (2 used) >[2011/12/15 11:33:49.099352, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.099416, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.099478, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.099543, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.099612, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.099673, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.099734, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.099796, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.099857, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.099920, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.099992, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.100059, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.100120, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.100183, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.100265, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.100331, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.100393, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.100455, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.100523, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.100586, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.100650, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.100715, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.100788, 5] smbd/files.c:464(file_free) > freed files structure 8610 (1 used) >[2011/12/15 11:33:49.100851, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.100917, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.101002, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.101063, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.101131, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.101264, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.101375, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.101619, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.101683, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.101744, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.101812, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.101876, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.101937, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.104079, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.104142, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.104203, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.104264, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.104327, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.104363, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7169 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.104678, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.107778, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.107851, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.107912, 3] smbd/process.c:1661(process_smb) > Transaction 113 of length 112 (0 toread) >[2011/12/15 11:33:49.107972, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.108008, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7233 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.108905, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.109030, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.109093, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.109157, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.109223, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.109287, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.109354, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.109423, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.109489, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.109551, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.109619, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.109687, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.109748, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.109809, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.109879, 5] smbd/files.c:126(file_new) > allocated file structure 4515, fnum = 8611 (2 used) >[2011/12/15 11:33:49.109946, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.110010, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.110072, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.110138, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.110206, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.110267, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.110328, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.110389, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.110459, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.110522, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.110594, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.110662, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.110740, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.110804, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.110886, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.110951, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.111013, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.111075, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.111143, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.111207, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.111270, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.111335, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.111409, 5] smbd/files.c:464(file_free) > freed files structure 8611 (1 used) >[2011/12/15 11:33:49.111472, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.111538, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.111623, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.111685, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.111752, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.111866, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.111976, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.112212, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.112275, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.112336, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.112404, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.112468, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.112529, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.114705, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.114769, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.114830, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.114891, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.114954, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.114991, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7233 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.115306, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.118360, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.118432, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.118502, 3] smbd/process.c:1661(process_smb) > Transaction 114 of length 112 (0 toread) >[2011/12/15 11:33:49.118563, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.118599, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7297 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5632 (0x1600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=25 >[2011/12/15 11:33:49.119475, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 6C 00 6F 00 73 00 74 00 2B 00 66 00 6F .\.l.o.s .t.+.f.o > [0010] 00 75 00 6E 00 64 00 00 00 .u.n.d.. . >[2011/12/15 11:33:49.119601, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.119664, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.119727, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = lost+found >[2011/12/15 11:33:49.119793, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "lost+found" >[2011/12/15 11:33:49.119857, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [LOST+FOUND] -> [lost+found] >[2011/12/15 11:33:49.119924, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.119993, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.120054, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.120116, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.120184, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.120253, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.120332, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.120393, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = lost+found >[2011/12/15 11:33:49.120463, 5] smbd/files.c:126(file_new) > allocated file structure 4516, fnum = 8612 (2 used) >[2011/12/15 11:33:49.120530, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/lost+found hash 0xebd92741 >[2011/12/15 11:33:49.120594, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(lost+found) returning 0744 >[2011/12/15 11:33:49.120656, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.120721, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [lost+found] [/mnt/public] >[2011/12/15 11:33:49.120790, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [lost+found] -> [/mnt/public/lost+found] >[2011/12/15 11:33:49.120851, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: lost+found reduced to /mnt/public/lost+found >[2011/12/15 11:33:49.120912, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: lost+found >[2011/12/15 11:33:49.120972, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.121034, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.121096, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=lost+found, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.121168, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.121235, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebb8 >[2011/12/15 11:33:49.121296, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:b:0 >[2011/12/15 11:33:49.121359, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.121441, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000B00 >[2011/12/15 11:33:49.121513, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed28 >[2011/12/15 11:33:49.121576, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file lost+found >[2011/12/15 11:33:49.121638, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.121705, 10] smbd/open.c:179(fd_open) > fd_open: name lost+found, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.121769, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file lost+found = 0 >[2011/12/15 11:33:49.121832, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file lost+found >[2011/12/15 11:33:49.121897, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000B00 >[2011/12/15 11:33:49.121971, 5] smbd/files.c:464(file_free) > freed files structure 8612 (1 used) >[2011/12/15 11:33:49.122034, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory lost+found, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.122100, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file lost+found >[2011/12/15 11:33:49.122184, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.122246, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.122330, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.122455, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.122567, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- >[2011/12/15 11:33:49.122803, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.122867, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.122928, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 0 to (NT) 0 >[2011/12/15 11:33:49.122996, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file lost+found requesting 0x20089 returning 0x20009 (NT_STATUS_ACCESS_DENIED) >[2011/12/15 11:33:49.123060, 10] smbd/open.c:127(smbd_check_open_rights) > smbd_check_open_rights: acl for lost+found is: >[2011/12/15 11:33:49.123121, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > sd: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00000000 (0) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:49.125257, 10] smbd/open.c:2714(open_directory) > open_directory: smbd_check_open_rights on file lost+found failed with NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.125319, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.125380, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.125441, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:49.125510, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.125547, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7297 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.125863, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.129014, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 106 >[2011/12/15 11:33:49.129085, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6a >[2011/12/15 11:33:49.129146, 3] smbd/process.c:1661(process_smb) > Transaction 115 of length 110 (0 toread) >[2011/12/15 11:33:49.129206, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.129242, 5] lib/util.c:342(show_msg) > size=106 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7361 > smt_wct=15 > smb_vwv[ 0]= 38 (0x26) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 38 (0x26) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=41 >[2011/12/15 11:33:49.129936, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F 00 6C .t.e.s.t ._.f.o.l > [0020] 00 64 00 65 00 72 00 00 00 .d.e.r.. . >[2011/12/15 11:33:49.130109, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.130171, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.130239, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:49.130308, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder" >[2011/12/15 11:33:49.130372, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [TEST_FOLDER] >[2011/12/15 11:33:49.130434, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = test_folder, dirpath = , start = test_folder >[2011/12/15 11:33:49.130513, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (21a0e8d8:size b) TEST_FOLDER -> test_folder >[2011/12/15 11:33:49.130575, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished test_folder -> test_folder >[2011/12/15 11:33:49.130636, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.130706, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.130767, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.130829, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_folder >[2011/12/15 11:33:49.130892, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:49.130952, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:49.131015, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:49.131076, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:49.131145, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:49.131207, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_folder, attr = 22 >[2011/12/15 11:33:49.131268, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:49.131344, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219edb08 now at offset -1 >[2011/12/15 11:33:49.131412, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_folder >[2011/12/15 11:33:49.131473, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.131535, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.131606, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:49.131667, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_folder] found ./test_folder fname=test_folder (test_folder) >[2011/12/15 11:33:49.131734, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:49.131795, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:49.131861, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:33:49.131927, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:49.131988, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:49.132056, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 116, useable_space = 16582 >[2011/12/15 11:33:49.132136, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 116, paramsize = 10, datasize = 116 >[2011/12/15 11:33:49.132198, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.132234, 5] lib/util.c:342(show_msg) > size=184 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7361 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 116 (0x74) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 116 (0x74) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=129 >[2011/12/15 11:33:49.132785, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 74 00 00 ........ .....t.. > [0010] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0020] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0030] 93 F6 BA CC 01 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0040] 00 00 00 00 00 10 00 00 00 16 00 00 00 00 00 00 ........ ........ > [0050] 00 10 00 54 00 43 00 30 00 56 00 41 00 51 00 7E ...T.C.0 .V.A.Q.~ > [0060] 00 30 00 00 00 00 00 00 00 00 00 74 00 65 00 73 .0...... ...t.e.s > [0070] 00 74 00 5F 00 66 00 6F 00 6C 00 64 00 65 00 72 .t._.f.o .l.d.e.r > [0080] 00 . >[2011/12/15 11:33:49.133245, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_folder directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:49.133312, 10] smbd/mangle_hash2.c:792(hash2_name_to_8_3) > hash2_name_to_8_3: test_folder -> 2B55F808 -> TC0VAQ~0 (cache=1) >[2011/12/15 11:33:49.136937, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 110 >[2011/12/15 11:33:49.137008, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6e >[2011/12/15 11:33:49.137069, 3] smbd/process.c:1661(process_smb) > Transaction 116 of length 114 (0 toread) >[2011/12/15 11:33:49.137129, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.137165, 5] lib/util.c:342(show_msg) > size=110 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7425 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6144 (0x1800) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=27 >[2011/12/15 11:33:49.138047, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 00 00 .l.d.e.r ... >[2011/12/15 11:33:49.138174, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.138236, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.138299, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder >[2011/12/15 11:33:49.138366, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder" >[2011/12/15 11:33:49.138429, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.138505, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.138593, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.138654, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.138716, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder >[2011/12/15 11:33:49.138784, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.138853, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.138914, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.138975, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_folder >[2011/12/15 11:33:49.139044, 5] smbd/files.c:126(file_new) > allocated file structure 4517, fnum = 8613 (2 used) >[2011/12/15 11:33:49.139111, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_folder hash 0x39173e53 >[2011/12/15 11:33:49.139175, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_folder) returning 0744 >[2011/12/15 11:33:49.139237, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_folder, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.139302, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.139371, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.139431, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.139492, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.139553, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.139620, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.139704, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_folder, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.139792, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:33:49.139878, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebc8 >[2011/12/15 11:33:49.139948, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:8e51:0 >[2011/12/15 11:33:49.140025, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:33:49.140132, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:33:49.140211, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed38 >[2011/12/15 11:33:49.140286, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_folder >[2011/12/15 11:33:49.140360, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.140446, 10] smbd/open.c:179(fd_open) > fd_open: name test_folder, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.140523, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_folder = 0 >[2011/12/15 11:33:49.140599, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_folder >[2011/12/15 11:33:49.140710, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:33:49.140809, 5] smbd/files.c:464(file_free) > freed files structure 8613 (1 used) >[2011/12/15 11:33:49.140885, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory test_folder, access_mask = 0x20089, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:49.140965, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file test_folder >[2011/12/15 11:33:49.141083, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:49.141157, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:49.141242, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:49.141402, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:49.141548, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:49.141852, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:49.141933, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:49.142004, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:49.142093, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file test_folder requesting 0x20089 returning 0x20009 (NT_STATUS_OK) >[2011/12/15 11:33:49.142180, 5] smbd/files.c:126(file_new) > allocated file structure 4518, fnum = 8614 (2 used) >[2011/12/15 11:33:49.142262, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_folder hash 0x39173e53 >[2011/12/15 11:33:49.142345, 10] smbd/open.c:179(fd_open) > fd_open: name test_folder, flags = 0600000 mode = 00, fd = 33. >[2011/12/15 11:33:49.142441, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:33:49.142554, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0fbb8 >[2011/12/15 11:33:49.142632, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:33:49.142759, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.142856, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:33:49.142951, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:49.143023, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:49.143100, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.143175, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.143250, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.143373, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.143501, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.143591, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8614, open name = test_folder >[2011/12/15 11:33:49.146616, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 70 >[2011/12/15 11:33:49.146771, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x46 >[2011/12/15 11:33:49.146846, 3] smbd/process.c:1661(process_smb) > Transaction 117 of length 74 (0 toread) >[2011/12/15 11:33:49.146918, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.146962, 5] lib/util.c:342(show_msg) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7489 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2011/12/15 11:33:49.147756, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 02 01 ..... >[2011/12/15 11:33:49.147878, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.147956, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.148034, 3] smbd/trans2.c:3512(call_trans2qfsinfo) > call_trans2qfsinfo: level = 258 >[2011/12/15 11:33:49.148124, 3] smbd/trans2.c:2950(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 258 >[2011/12/15 11:33:49.148218, 5] smbd/trans2.c:3092(smbd_do_qfsinfo) > smbd_do_qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 6, vol=public serv=public >[2011/12/15 11:33:49.148298, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 30, useable_space = 16584 >[2011/12/15 11:33:49.148372, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 0, data_to_send = 30, paramsize = 0, datasize = 30 >[2011/12/15 11:33:49.148445, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.148490, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7489 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 30 (0x1E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 30 (0x1E) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=31 >[2011/12/15 11:33:49.149146, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 91 2E EA 88 0C 00 00 ........ ........ > [0010] 00 00 00 70 00 75 00 62 00 6C 00 69 00 63 00 ...p.u.b .l.i.c. >[2011/12/15 11:33:49.149370, 4] smbd/trans2.c:3528(call_trans2qfsinfo) > SMBtrans2 info_level = 258 >[2011/12/15 11:33:49.151637, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:33:49.151788, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:33:49.151862, 3] smbd/process.c:1661(process_smb) > Transaction 118 of length 76 (0 toread) >[2011/12/15 11:33:49.151934, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.151977, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7553 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 104 (0x68) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:33:49.152802, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 A6 21 EC 03 ....!.. >[2011/12/15 11:33:49.152928, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.153005, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.153083, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004 >[2011/12/15 11:33:49.153187, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.153315, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.153393, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:33:49.153470, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 8614) level=1004 call=7 total_data=0 >[2011/12/15 11:33:49.153558, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 8614) level=1004 max_data=104 >[2011/12/15 11:33:49.153641, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.153730, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.153819, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.153911, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:33:49.153994, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 10:55:48 2011 > access: Thu Dec 15 10:55:48 2011 > write: Thu Dec 15 10:55:48 2011 > change: Thu Dec 15 10:55:48 2011 > mode: 10 >[2011/12/15 11:33:49.154273, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:33:49.154348, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:33:49.154421, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.154484, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7553 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:33:49.155140, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0010] 93 F6 BA CC 01 00 72 20 93 F6 BA CC 01 00 72 20 ......r ......r > [0020] 93 F6 BA CC 01 10 00 00 00 00 00 00 00 ........ ..... >[2011/12/15 11:33:49.158481, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:33:49.158636, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:33:49.158710, 3] smbd/process.c:1661(process_smb) > Transaction 119 of length 76 (0 toread) >[2011/12/15 11:33:49.158781, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.158823, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7617 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 64 (0x40) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:33:49.159645, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 A6 21 ED 03 ....!.. >[2011/12/15 11:33:49.159769, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.159844, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.159922, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1005 >[2011/12/15 11:33:49.160025, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.160153, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.160230, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:33:49.160302, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 8614) level=1005 call=7 total_data=0 >[2011/12/15 11:33:49.160378, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 8614) level=1005 max_data=64 >[2011/12/15 11:33:49.160452, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.160526, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.160601, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.160684, 10] smbd/trans2.c:4478(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_STANDARD_INFORMATION >[2011/12/15 11:33:49.160759, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 16582 >[2011/12/15 11:33:49.160833, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 >[2011/12/15 11:33:49.160905, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.160949, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7617 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 24 (0x18) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 24 (0x18) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2011/12/15 11:33:49.161604, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 00 01 00 00 00 00 01 00 00 ........ ..... >[2011/12/15 11:33:49.163758, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:33:49.163910, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:33:49.163986, 3] smbd/process.c:1661(process_smb) > Transaction 120 of length 76 (0 toread) >[2011/12/15 11:33:49.164057, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.164101, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7681 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:33:49.164926, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 A6 21 EE 03 ....!.. >[2011/12/15 11:33:49.165053, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.165130, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.165208, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 >[2011/12/15 11:33:49.165312, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.165440, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.165520, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:33:49.165593, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 8614) level=1006 call=7 total_data=0 >[2011/12/15 11:33:49.165670, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 8614) level=1006 max_data=40 >[2011/12/15 11:33:49.165744, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.165820, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.165895, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.165986, 10] smbd/trans2.c:4620(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION >[2011/12/15 11:33:49.166062, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 >[2011/12/15 11:33:49.166136, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 >[2011/12/15 11:33:49.166209, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.166253, 5] lib/util.c:342(show_msg) > size=68 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7681 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 8 (0x8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 8 (0x8) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=13 >[2011/12/15 11:33:49.166934, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 51 8E 00 00 00 00 00 00 .....Q.. ..... >[2011/12/15 11:33:49.168991, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:33:49.169120, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:33:49.169183, 3] smbd/process.c:1661(process_smb) > Transaction 121 of length 76 (0 toread) >[2011/12/15 11:33:49.169243, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.169280, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7745 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 32 (0x20) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:33:49.169972, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 A6 21 EF 03 ....!.. >[2011/12/15 11:33:49.170053, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.170117, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.170182, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1007 >[2011/12/15 11:33:49.170267, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.170371, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.170436, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:33:49.170517, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_folder (fnum = 8614) level=1007 call=7 total_data=0 >[2011/12/15 11:33:49.170581, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_folder (fnum = 8614) level=1007 max_data=32 >[2011/12/15 11:33:49.170643, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_folder >[2011/12/15 11:33:49.170705, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:49.170768, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:49.170836, 10] smbd/trans2.c:4493(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_EA_INFORMATION >[2011/12/15 11:33:49.170899, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 16582 >[2011/12/15 11:33:49.170960, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4 >[2011/12/15 11:33:49.171021, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.171057, 5] lib/util.c:342(show_msg) > size=64 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7745 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 4 (0x4) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 4 (0x4) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=9 >[2011/12/15 11:33:49.171607, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 00 00 00 ........ . >[2011/12/15 11:33:49.173968, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 200 >[2011/12/15 11:33:49.174041, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xc8 >[2011/12/15 11:33:49.174101, 3] smbd/process.c:1661(process_smb) > Transaction 122 of length 204 (0 toread) >[2011/12/15 11:33:49.174161, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.174198, 5] lib/util.c:342(show_msg) > size=200 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7809 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=29184 (0x7200) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=117 >[2011/12/15 11:33:49.175110, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 7B 00 34 00 63 .l.d.e.r .:.{.4.c > [0020] 00 38 00 63 00 63 00 31 00 35 00 35 00 2D 00 36 .8.c.c.1 .5.5.-.6 > [0030] 00 63 00 31 00 65 00 2D 00 31 00 31 00 64 00 31 .c.1.e.- .1.1.d.1 > [0040] 00 2D 00 38 00 65 00 34 00 31 00 2D 00 30 00 30 .-.8.e.4 .1.-.0.0 > [0050] 00 63 00 30 00 34 00 66 00 62 00 39 00 33 00 38 .c.0.4.f .b.9.3.8 > [0060] 00 36 00 64 00 7D 00 3A 00 24 00 44 00 41 00 54 .6.d.}.: .$.D.A.T > [0070] 00 41 00 00 00 .A... >[2011/12/15 11:33:49.175506, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.175568, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.175637, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA >[2011/12/15 11:33:49.175704, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA" >[2011/12/15 11:33:49.175771, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.175842, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.175914, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.175975, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.176037, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA >[2011/12/15 11:33:49.176113, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.176176, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.176239, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.176274, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7809 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.176599, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.179016, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.179088, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.179148, 3] smbd/process.c:1661(process_smb) > Transaction 123 of length 182 (0 toread) >[2011/12/15 11:33:49.179208, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.179244, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7873 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.180139, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.180450, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.180512, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.180577, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.180643, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.180707, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.180776, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.180845, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.180905, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.180967, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.181039, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.181101, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.181164, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.181199, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7873 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.181513, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.184242, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.184312, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.184373, 3] smbd/process.c:1661(process_smb) > Transaction 124 of length 192 (0 toread) >[2011/12/15 11:33:49.184433, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.184469, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7937 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.185360, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.185712, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.185774, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.185839, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.185905, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.185969, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.186037, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.186106, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.186167, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.186228, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.186302, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.186364, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.186426, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.186475, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=7937 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.186790, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.189462, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.189534, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.189595, 3] smbd/process.c:1661(process_smb) > Transaction 125 of length 166 (0 toread) >[2011/12/15 11:33:49.189655, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.189691, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8001 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.190590, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.190856, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.190918, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.190983, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.191049, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.191113, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.191182, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.191251, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.191311, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.191373, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.191445, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.191507, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.191570, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.191606, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8001 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.191920, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.194659, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.194731, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.194791, 3] smbd/process.c:1661(process_smb) > Transaction 126 of length 176 (0 toread) >[2011/12/15 11:33:49.194852, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.194888, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8065 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.195761, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.196084, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.196147, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.196211, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.196277, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.196341, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.196409, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.196478, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.196538, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.196600, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.196673, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.196735, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.196798, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.196834, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8065 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.197148, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.199867, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.199937, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.199998, 3] smbd/process.c:1661(process_smb) > Transaction 127 of length 166 (0 toread) >[2011/12/15 11:33:49.200058, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.200094, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8129 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.201000, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.201286, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.201349, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.201414, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.201485, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.201550, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.201619, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.201688, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.201748, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.201810, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.201883, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.201945, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.202008, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.202044, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8129 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.202358, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.205015, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.205085, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.205145, 3] smbd/process.c:1661(process_smb) > Transaction 128 of length 176 (0 toread) >[2011/12/15 11:33:49.205205, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.205241, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8193 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.206120, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.206452, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.206515, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.206579, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.206645, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.206709, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.206777, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.206846, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.206906, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.206968, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.207041, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.207103, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.207166, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.207201, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8193 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.207516, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.210225, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.210297, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.210357, 3] smbd/process.c:1661(process_smb) > Transaction 129 of length 166 (0 toread) >[2011/12/15 11:33:49.210417, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.210465, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8257 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.211343, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.211609, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.211689, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.211754, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.211820, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.211884, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.211952, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.212021, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.212081, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.212143, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.212215, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.212277, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.212340, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.212376, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8257 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.212690, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.215540, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.215611, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.215672, 3] smbd/process.c:1661(process_smb) > Transaction 130 of length 176 (0 toread) >[2011/12/15 11:33:49.215732, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.215768, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8321 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.216643, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.216950, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.217012, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.217095, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.217161, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.217225, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.217294, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.217362, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.217422, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.217489, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.217563, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.217625, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.217687, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.217723, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8321 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.218037, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.220745, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.220814, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.220875, 3] smbd/process.c:1661(process_smb) > Transaction 131 of length 166 (0 toread) >[2011/12/15 11:33:49.220935, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.220971, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8385 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.221852, 10] ../lib/util/util.c:415(dump_data) > [0000] FF 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.222118, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.222180, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.222244, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.222325, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.222390, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.222467, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.222536, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.222597, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.222658, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.222730, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.222793, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.222855, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.222891, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8385 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.223205, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.225924, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.225995, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.226055, 3] smbd/process.c:1661(process_smb) > Transaction 132 of length 176 (0 toread) >[2011/12/15 11:33:49.226116, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.226151, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8449 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.227034, 10] ../lib/util/util.c:415(dump_data) > [0000] FF 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.227341, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.227403, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.227468, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.227551, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.227617, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.227685, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.227754, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.227814, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.227877, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.227950, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.228012, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.228075, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.228110, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8449 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.228424, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.231167, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.231239, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.231299, 3] smbd/process.c:1661(process_smb) > Transaction 133 of length 166 (0 toread) >[2011/12/15 11:33:49.231360, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.231396, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8513 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.232270, 10] ../lib/util/util.c:415(dump_data) > [0000] FF 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.232534, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.232596, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.232661, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.232726, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.232790, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.232877, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.232946, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.233006, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.233068, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.233140, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.233203, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.233265, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.233301, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8513 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.233615, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.236344, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.236414, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.236475, 3] smbd/process.c:1661(process_smb) > Transaction 134 of length 176 (0 toread) >[2011/12/15 11:33:49.236535, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.236571, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8577 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.237444, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.237751, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.237813, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.237877, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.237943, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.238007, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.238093, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.238163, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.238223, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.238285, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.238357, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.238419, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.238495, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.238531, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8577 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.238845, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.241615, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.241770, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.241844, 3] smbd/process.c:1661(process_smb) > Transaction 135 of length 166 (0 toread) >[2011/12/15 11:33:49.241915, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.241958, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8641 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.243017, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.243408, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.243493, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.243578, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.243660, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.243740, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.243826, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.243914, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.244018, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.244094, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.244186, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.244263, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.244338, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.244381, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8641 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.244752, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.246872, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.247027, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.247101, 3] smbd/process.c:1661(process_smb) > Transaction 136 of length 176 (0 toread) >[2011/12/15 11:33:49.247172, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.247215, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8705 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.248251, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.248698, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.248786, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.248870, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.248952, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.249031, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.249117, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.249205, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.249277, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.249384, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.249480, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.249558, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.249634, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.249677, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8705 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.250052, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.252177, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.252333, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.252407, 3] smbd/process.c:1661(process_smb) > Transaction 137 of length 182 (0 toread) >[2011/12/15 11:33:49.252479, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.252522, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8769 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.253679, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 44 00 6F .l.d.e.r .:...D.o > [0020] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 53 00 75 .c.u.m.e .n.t.S.u > [0030] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0040] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.254129, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.254214, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.254298, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.254381, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:DocumentSummaryInformation:$DATA" >[2011/12/15 11:33:49.254482, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.254572, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.254660, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.254734, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.254809, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.254934, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.255011, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.255087, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.255131, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8769 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.255506, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.258563, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.258717, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.258794, 3] smbd/process.c:1661(process_smb) > Transaction 138 of length 192 (0 toread) >[2011/12/15 11:33:49.258865, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.258908, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8833 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.259949, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 44 00 6F 00 63 00 75 00 6D .f._...D .o.c.u.m > [0030] 00 65 00 6E 00 74 00 53 00 75 00 6D 00 6D 00 61 .e.n.t.S .u.m.m.a > [0040] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0050] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.260471, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.260559, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.260643, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.260727, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_DocumentSummaryInformation:$DATA" >[2011/12/15 11:33:49.260807, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.260894, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.260982, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.261056, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.261131, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.261257, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.261335, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.261411, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.261455, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8833 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.261832, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.264968, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.265138, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.265214, 3] smbd/process.c:1661(process_smb) > Transaction 139 of length 182 (0 toread) >[2011/12/15 11:33:49.265286, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.265330, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8897 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.266625, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 44 00 6F .l.d.e.r .:...D.o > [0020] 00 63 00 75 00 6D 00 65 00 6E 00 74 00 53 00 75 .c.u.m.e .n.t.S.u > [0030] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0040] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.267093, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.267203, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.267288, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.267372, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:DocumentSummaryInformation:$DATA" >[2011/12/15 11:33:49.267452, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.267540, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.267630, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.267703, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.267779, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.267893, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.267961, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.268025, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.268061, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8897 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.268376, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.271038, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.271113, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.271174, 3] smbd/process.c:1661(process_smb) > Transaction 140 of length 192 (0 toread) >[2011/12/15 11:33:49.271235, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.271271, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8961 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.272149, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 44 00 6F 00 63 00 75 00 6D .f._...D .o.c.u.m > [0030] 00 65 00 6E 00 74 00 53 00 75 00 6D 00 6D 00 61 .e.n.t.S .u.m.m.a > [0040] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0050] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.272520, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.272584, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.272652, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.272719, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_DocumentSummaryInformation:$DATA" >[2011/12/15 11:33:49.272785, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.272855, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.272925, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.272985, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.273047, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_DocumentSummaryInformation:$DATA >[2011/12/15 11:33:49.273136, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.273200, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.273263, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.273299, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=8961 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.273619, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.276235, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.276305, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.276377, 3] smbd/process.c:1661(process_smb) > Transaction 141 of length 166 (0 toread) >[2011/12/15 11:33:49.276462, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.276515, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9025 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.277506, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.277774, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.277837, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.277902, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.277968, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.278032, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.278101, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.278171, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.278231, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.278293, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.278382, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.278453, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.278517, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.278552, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9025 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.278867, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.281285, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.281354, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.281415, 3] smbd/process.c:1661(process_smb) > Transaction 142 of length 176 (0 toread) >[2011/12/15 11:33:49.281480, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.281517, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9089 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.282397, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.282714, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.282776, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.282841, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.282907, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.282971, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.283040, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.283109, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.283169, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.283231, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.283303, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.283383, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.283447, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.283483, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9089 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.283798, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.286515, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.286586, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.286647, 3] smbd/process.c:1661(process_smb) > Transaction 143 of length 166 (0 toread) >[2011/12/15 11:33:49.286707, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.286743, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9153 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.287620, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.287886, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.287949, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.288013, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.288079, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.288143, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.288212, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.288280, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.288341, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.288402, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.288474, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.288536, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.288599, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.288652, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9153 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.288968, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.291689, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.291761, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.291822, 3] smbd/process.c:1661(process_smb) > Transaction 144 of length 176 (0 toread) >[2011/12/15 11:33:49.291882, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.291918, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9217 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.292796, 10] ../lib/util/util.c:415(dump_data) > [0000] EF 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.293104, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.293166, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.293230, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.293296, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.293360, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.293428, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.293497, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.293557, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.293619, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.293691, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.293753, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.293816, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.293852, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9217 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.294188, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.296898, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.296967, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.297028, 3] smbd/process.c:1661(process_smb) > Transaction 145 of length 166 (0 toread) >[2011/12/15 11:33:49.297088, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.297124, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9281 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.298002, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.298268, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.298330, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.298394, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.298473, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.298538, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.298607, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.298675, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.298736, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.298797, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.298869, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.298931, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.298994, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.299030, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9281 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.299345, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.302140, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.302212, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.302273, 3] smbd/process.c:1661(process_smb) > Transaction 146 of length 176 (0 toread) >[2011/12/15 11:33:49.302333, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.302369, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9345 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.303262, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.303570, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.303632, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.303696, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.303762, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.303826, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.303895, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.303964, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.304024, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.304086, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.304158, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.304221, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.304283, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.304319, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9345 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.304634, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.307439, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.307510, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.307590, 3] smbd/process.c:1661(process_smb) > Transaction 147 of length 166 (0 toread) >[2011/12/15 11:33:49.307650, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.307686, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9409 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.308565, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.308831, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.308893, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.308957, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.309023, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.309087, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.309156, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.309225, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.309285, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.309347, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.309419, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.309481, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.309544, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.309580, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9409 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.309895, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.312599, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.312669, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.312730, 3] smbd/process.c:1661(process_smb) > Transaction 148 of length 176 (0 toread) >[2011/12/15 11:33:49.312807, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.312844, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9473 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.313723, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.314030, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.314093, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.314157, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.314223, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.314287, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.314356, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.314424, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.314498, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.314560, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.314633, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.314695, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.314758, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.314794, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9473 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.315108, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.317841, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.317912, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.317973, 3] smbd/process.c:1661(process_smb) > Transaction 149 of length 182 (0 toread) >[2011/12/15 11:33:49.318034, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.318069, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9537 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.318979, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 65 .l.d.e.r .:...S.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.319291, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.319353, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.319418, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.319484, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.319548, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.319617, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.319685, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.319746, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.319807, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.319879, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.319942, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.320004, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.320040, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9537 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.320355, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.320403, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:49.320465, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:49.320525, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:49.320641, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:49.323061, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.323153, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.323214, 3] smbd/process.c:1661(process_smb) > Transaction 150 of length 192 (0 toread) >[2011/12/15 11:33:49.323274, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.323310, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9601 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.324191, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 65 00 62 00 69 00 65 .f._...S .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.324545, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.324609, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:49.324675, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:49.324761, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:49.324841, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:49.324909, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:49.324973, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:49.325214, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:49.325335, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:49.325404, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.325477, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.325541, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.325611, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.325682, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.325760, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.325823, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.325896, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.325959, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.326022, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.326057, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9601 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.326372, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.328341, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.328411, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.328472, 3] smbd/process.c:1661(process_smb) > Transaction 151 of length 182 (0 toread) >[2011/12/15 11:33:49.328532, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.328567, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9665 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.329447, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 65 .l.d.e.r .:...S.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.329762, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.329825, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.329889, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.329955, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.330019, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.330088, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.330157, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.330217, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.330297, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.330369, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.330432, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.330503, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.330539, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9665 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.330853, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.333662, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.333733, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.333793, 3] smbd/process.c:1661(process_smb) > Transaction 152 of length 192 (0 toread) >[2011/12/15 11:33:49.333853, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.333889, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9729 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.334778, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 65 00 62 00 69 00 65 .f._...S .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.335131, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.335193, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.335257, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.335323, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.335387, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.335456, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.335525, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.335585, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.335666, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.335739, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.335801, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.335864, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.335900, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9729 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.336214, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.338920, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.339012, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.339085, 3] smbd/process.c:1661(process_smb) > Transaction 153 of length 182 (0 toread) >[2011/12/15 11:33:49.339155, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.339197, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9793 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.340242, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.340703, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.340787, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.340873, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.340956, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.341037, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.341124, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.341212, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.341285, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.341361, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.341487, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.341566, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.341643, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.341686, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9793 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.342062, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.344197, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.344350, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.344425, 3] smbd/process.c:1661(process_smb) > Transaction 154 of length 192 (0 toread) >[2011/12/15 11:33:49.344496, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.344539, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9857 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.345586, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.346107, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.346198, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.346284, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.346367, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.346468, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.346558, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.346646, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.346720, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.346794, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.346919, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.346998, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.347073, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.347117, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9857 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.347495, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.350875, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.351018, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.351094, 3] smbd/process.c:1661(process_smb) > Transaction 155 of length 182 (0 toread) >[2011/12/15 11:33:49.351166, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.351209, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9921 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.352252, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.352714, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.352805, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.352891, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.352975, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.353057, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.353156, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.353255, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.353340, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.353430, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.353568, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.353662, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.353740, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.353791, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9921 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.354179, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.357053, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.357208, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.357283, 3] smbd/process.c:1661(process_smb) > Transaction 156 of length 192 (0 toread) >[2011/12/15 11:33:49.357354, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.357398, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9985 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.358465, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.361078, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.361180, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.361267, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.361351, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.361432, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.361522, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.361613, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.361686, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.361761, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.361889, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.361970, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.362047, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.362090, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=9985 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.362493, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.364887, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.365025, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.365102, 3] smbd/process.c:1661(process_smb) > Transaction 157 of length 182 (0 toread) >[2011/12/15 11:33:49.365175, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.365218, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10049 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.366267, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.366751, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.366839, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.366924, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.367008, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.367088, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.367175, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.367263, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.367336, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.367411, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.367538, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.367618, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.367694, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.367738, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10049 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.368113, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.370186, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.370343, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.370436, 3] smbd/process.c:1661(process_smb) > Transaction 158 of length 192 (0 toread) >[2011/12/15 11:33:49.370527, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.370581, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10113 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.371861, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.372436, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.372521, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.372611, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.372700, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.372770, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.372843, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.372916, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.372977, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.373039, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.373137, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.373203, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.373266, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.373302, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10113 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.373630, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.376690, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.376775, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.376837, 3] smbd/process.c:1661(process_smb) > Transaction 159 of length 182 (0 toread) >[2011/12/15 11:33:49.376897, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.376932, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10177 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.377815, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.378126, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.378189, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.378254, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.378320, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.378385, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.378468, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.378539, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.378600, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.378661, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.378753, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.378817, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.378879, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.378915, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10177 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.379229, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.381839, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.381910, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.381971, 3] smbd/process.c:1661(process_smb) > Transaction 160 of length 192 (0 toread) >[2011/12/15 11:33:49.382031, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.382067, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10241 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.383051, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.383602, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.383691, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.383779, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.383868, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.383958, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.384047, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.384140, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.384219, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.384305, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.384479, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.384611, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.384709, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.384763, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10241 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.385253, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.388209, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.388290, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.388351, 3] smbd/process.c:1661(process_smb) > Transaction 161 of length 182 (0 toread) >[2011/12/15 11:33:49.388412, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.388447, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10305 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.389322, 10] ../lib/util/util.c:415(dump_data) > [0000] 79 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F y\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.389640, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.389703, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.389772, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.389839, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.389905, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.389976, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.390047, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.390107, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.390169, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.390244, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.390327, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.390391, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.390427, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10305 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.390751, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.393401, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.393475, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.393537, 3] smbd/process.c:1661(process_smb) > Transaction 162 of length 192 (0 toread) >[2011/12/15 11:33:49.393597, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.393633, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10369 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.394522, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.394874, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.394936, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.395001, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.395067, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.395131, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.395200, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.395269, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.395329, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.395390, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.395464, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.395543, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.395608, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.395644, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10369 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.395957, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.398630, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.398702, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.398763, 3] smbd/process.c:1661(process_smb) > Transaction 163 of length 182 (0 toread) >[2011/12/15 11:33:49.398823, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.398859, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10433 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.399734, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.400043, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.400105, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.400170, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.400236, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.400300, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.400368, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.400437, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.400497, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.400558, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.400630, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.400692, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.400771, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.400809, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10433 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.401123, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.403887, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.403959, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.404020, 3] smbd/process.c:1661(process_smb) > Transaction 164 of length 192 (0 toread) >[2011/12/15 11:33:49.404080, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.404116, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10497 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.404992, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.405343, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.405405, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.405474, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.405541, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.405605, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.405673, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.405742, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.405802, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.405863, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.405936, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.405998, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.406078, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.406116, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10497 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.406430, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.409132, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.409202, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.409262, 3] smbd/process.c:1661(process_smb) > Transaction 165 of length 182 (0 toread) >[2011/12/15 11:33:49.409323, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.409358, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10561 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.410241, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.410560, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.410623, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.410687, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.410753, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.410817, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.410886, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.410954, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.411014, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.411076, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.411148, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.411210, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.411273, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.411326, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10561 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.411644, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.414381, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.414459, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.414521, 3] smbd/process.c:1661(process_smb) > Transaction 166 of length 192 (0 toread) >[2011/12/15 11:33:49.414581, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.414617, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10625 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.415492, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.415844, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.415906, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.415970, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.416036, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.416100, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.416168, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.416237, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.416297, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.416358, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.416432, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.416494, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.416557, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.416610, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10625 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.416925, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.419413, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.419485, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.419546, 3] smbd/process.c:1661(process_smb) > Transaction 167 of length 182 (0 toread) >[2011/12/15 11:33:49.419606, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.419642, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10689 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.420517, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.420827, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.420889, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.420953, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.421019, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.421083, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.421152, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.421220, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.421281, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.421342, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.421414, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.421481, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.421545, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.421580, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10689 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.421913, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.424602, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.424672, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.424733, 3] smbd/process.c:1661(process_smb) > Transaction 168 of length 192 (0 toread) >[2011/12/15 11:33:49.424793, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.424829, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10753 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.425710, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.426062, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.426124, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.426189, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.426255, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.426319, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.426387, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.426467, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.426529, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.426591, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.426663, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.426725, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.426788, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.426823, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10753 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.427155, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.429859, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.429930, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.429991, 3] smbd/process.c:1661(process_smb) > Transaction 169 of length 182 (0 toread) >[2011/12/15 11:33:49.430051, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.430087, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10817 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.430975, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.431286, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.431348, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.431412, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.431478, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.431542, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.431611, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.431679, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.431740, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.431801, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.431874, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.431936, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.431999, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.432035, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10817 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.432366, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.435064, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.435135, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.435196, 3] smbd/process.c:1661(process_smb) > Transaction 170 of length 192 (0 toread) >[2011/12/15 11:33:49.435256, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.435292, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10881 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.436168, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.436519, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.436581, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.436645, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.436711, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.436775, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.436844, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.436912, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.436972, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.437034, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.437108, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.437169, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.437232, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.437268, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10881 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.437599, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.440461, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.440619, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.440693, 3] smbd/process.c:1661(process_smb) > Transaction 171 of length 182 (0 toread) >[2011/12/15 11:33:49.440765, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.440808, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10945 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.441855, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 4F 00 7A .l.d.e.r .:...O.z > [0020] 00 6E 00 67 00 6B 00 6C 00 72 00 74 00 4F 00 77 .n.g.k.l .r.t.O.w > [0030] 00 75 00 64 00 72 00 70 00 30 00 62 00 41 00 61 .u.d.r.p .0.b.A.a > [0040] 00 79 00 6F 00 6A 00 64 00 31 00 71 00 57 00 68 .y.o.j.d .1.q.W.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.442316, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.442403, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.442510, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.442596, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.442676, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.442764, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.442852, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.442925, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.443000, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.443093, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.443170, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.443246, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.443289, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=10945 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.443664, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.446808, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.446993, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.447068, 3] smbd/process.c:1661(process_smb) > Transaction 172 of length 192 (0 toread) >[2011/12/15 11:33:49.447140, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.447183, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11009 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.448227, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 4F 00 7A 00 6E 00 67 00 6B .f._...O .z.n.g.k > [0030] 00 6C 00 72 00 74 00 4F 00 77 00 75 00 64 00 72 .l.r.t.O .w.u.d.r > [0040] 00 70 00 30 00 62 00 41 00 61 00 79 00 6F 00 6A .p.0.b.A .a.y.o.j > [0050] 00 64 00 31 00 71 00 57 00 68 00 3A 00 24 00 44 .d.1.q.W .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.448747, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.448837, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.448921, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.449004, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA" >[2011/12/15 11:33:49.449083, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.449170, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.449258, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.449330, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.449404, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_OzngklrtOwudrp0bAayojd1qWh:$DATA >[2011/12/15 11:33:49.449498, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.449576, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.449651, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.449694, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11009 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.450069, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.453148, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.453337, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.453412, 3] smbd/process.c:1661(process_smb) > Transaction 173 of length 182 (0 toread) >[2011/12/15 11:33:49.453487, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.453530, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11073 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.454596, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.455059, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.455147, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.455232, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.455314, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.455395, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.455482, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.455572, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.455644, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.455719, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.455812, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.455891, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.455966, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.456009, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11073 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.456384, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.459506, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.459660, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.459766, 3] smbd/process.c:1661(process_smb) > Transaction 174 of length 192 (0 toread) >[2011/12/15 11:33:49.459838, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.459881, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11137 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.460924, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.461444, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.461535, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.461619, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.461702, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.461782, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.461870, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.461959, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.462033, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.462108, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.462202, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.462279, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.462355, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.462398, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11137 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.462795, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.464799, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.464950, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.465056, 3] smbd/process.c:1661(process_smb) > Transaction 175 of length 182 (0 toread) >[2011/12/15 11:33:49.465128, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.465171, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11201 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.466214, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.466622, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.466689, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.466759, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.466827, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.466894, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.466967, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.467040, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.467101, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.467163, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.467238, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.467302, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.467365, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.467401, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11201 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.467715, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.470995, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.471069, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.471129, 3] smbd/process.c:1661(process_smb) > Transaction 176 of length 192 (0 toread) >[2011/12/15 11:33:49.471216, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.471252, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11265 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.472129, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.472482, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.472555, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.472621, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.472687, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.472752, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.472820, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.472889, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.472949, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.473011, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.473084, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.473147, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.473209, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.473245, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11265 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.473564, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.476312, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.476382, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.476442, 3] smbd/process.c:1661(process_smb) > Transaction 177 of length 182 (0 toread) >[2011/12/15 11:33:49.476520, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.476557, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11329 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.477435, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.477752, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.477814, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.477878, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.477944, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.478008, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.478077, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.478145, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.478205, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.478267, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.478340, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.478402, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.478472, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.478509, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11329 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.478823, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.481551, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.481622, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.481683, 3] smbd/process.c:1661(process_smb) > Transaction 178 of length 192 (0 toread) >[2011/12/15 11:33:49.481743, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.481797, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11393 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.482683, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.483037, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.483099, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.483163, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.483229, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.483293, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.483362, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.483431, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.483491, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.483553, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.483626, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.483688, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.483751, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.483787, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11393 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.484100, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.486767, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.486839, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.486900, 3] smbd/process.c:1661(process_smb) > Transaction 179 of length 182 (0 toread) >[2011/12/15 11:33:49.486960, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.487014, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11457 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.487892, 10] ../lib/util/util.c:415(dump_data) > [0000] 84 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.488203, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.488265, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.488330, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.488395, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.488460, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.488528, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.488597, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.488657, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.488719, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.488792, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.488854, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.488916, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.488952, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11457 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.489266, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.491967, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.492040, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.492100, 3] smbd/process.c:1661(process_smb) > Transaction 180 of length 192 (0 toread) >[2011/12/15 11:33:49.492161, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.492197, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11521 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.493092, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.493446, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.493508, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.493572, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.493638, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.493702, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.493771, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.493839, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.493899, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.493961, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.494035, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.494097, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.494160, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.494195, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11521 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.494522, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.497312, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.497381, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.497442, 3] smbd/process.c:1661(process_smb) > Transaction 181 of length 182 (0 toread) >[2011/12/15 11:33:49.497508, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.497544, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11585 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.498437, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 45 00 70 .l.d.e.r .:...E.p > [0020] 00 67 00 79 00 6B 00 78 00 30 00 76 00 4A 00 65 .g.y.k.x .0.v.J.e > [0030] 00 63 00 6B 00 75 00 32 00 34 00 77 00 31 00 76 .c.k.u.2 .4.w.1.v > [0040] 00 62 00 76 00 68 00 35 00 6B 00 32 00 4E 00 68 .b.v.h.5 .k.2.N.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.498757, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.498820, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.498884, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.498950, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:33:49.499014, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.499083, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.499151, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.499212, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.499273, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.499346, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.499408, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.499471, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.499507, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11585 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.499821, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.502490, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.502579, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.502641, 3] smbd/process.c:1661(process_smb) > Transaction 182 of length 192 (0 toread) >[2011/12/15 11:33:49.502701, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.502736, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11649 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.503632, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 45 00 70 00 67 00 79 00 6B .f._...E .p.g.y.k > [0030] 00 78 00 30 00 76 00 4A 00 65 00 63 00 6B 00 75 .x.0.v.J .e.c.k.u > [0040] 00 32 00 34 00 77 00 31 00 76 00 62 00 76 00 68 .2.4.w.1 .v.b.v.h > [0050] 00 35 00 6B 00 32 00 4E 00 68 00 3A 00 24 00 44 .5.k.2.N .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.503985, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.504048, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.504113, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.504179, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:33:49.504243, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.504312, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.504381, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.504441, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.504503, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.504576, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.504638, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.504701, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.504736, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11649 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.505051, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.507762, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.507844, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.507905, 3] smbd/process.c:1661(process_smb) > Transaction 183 of length 182 (0 toread) >[2011/12/15 11:33:49.507965, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.508001, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11713 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.508892, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 45 00 70 .l.d.e.r .:...E.p > [0020] 00 67 00 79 00 6B 00 78 00 30 00 76 00 4A 00 65 .g.y.k.x .0.v.J.e > [0030] 00 63 00 6B 00 75 00 32 00 34 00 77 00 31 00 76 .c.k.u.2 .4.w.1.v > [0040] 00 62 00 76 00 68 00 35 00 6B 00 32 00 4E 00 68 .b.v.h.5 .k.2.N.h > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.509203, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.509265, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.509330, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.509396, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:33:49.509460, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.509529, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.509598, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.509658, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.509719, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.509792, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.509854, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.509917, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.509952, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11713 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.510267, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.512761, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.512835, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.512895, 3] smbd/process.c:1661(process_smb) > Transaction 184 of length 192 (0 toread) >[2011/12/15 11:33:49.512956, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.512991, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11777 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.513887, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 45 00 70 00 67 00 79 00 6B .f._...E .p.g.y.k > [0030] 00 78 00 30 00 76 00 4A 00 65 00 63 00 6B 00 75 .x.0.v.J .e.c.k.u > [0040] 00 32 00 34 00 77 00 31 00 76 00 62 00 76 00 68 .2.4.w.1 .v.b.v.h > [0050] 00 35 00 6B 00 32 00 4E 00 68 00 3A 00 24 00 44 .5.k.2.N .h.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.514241, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.514303, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.514368, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.514434, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA" >[2011/12/15 11:33:49.514511, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.514580, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.514649, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.514710, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.514771, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_Epgykx0vJecku24w1vbvh5k2Nh:$DATA >[2011/12/15 11:33:49.514844, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.514907, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.514969, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.515005, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11777 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.515319, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.518001, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.518073, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.518133, 3] smbd/process.c:1661(process_smb) > Transaction 185 of length 182 (0 toread) >[2011/12/15 11:33:49.518193, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.518229, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11841 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.519136, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.519448, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.519510, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.519574, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.519640, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.519704, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.519773, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.519841, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.519901, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.519963, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.520035, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.520097, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.520160, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.520196, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11841 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.520510, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.523238, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.523309, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.523370, 3] smbd/process.c:1661(process_smb) > Transaction 186 of length 192 (0 toread) >[2011/12/15 11:33:49.523430, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.523466, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11905 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.524361, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.524714, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.524776, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.524840, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.524906, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.524970, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.525039, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.525108, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.525168, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.525230, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.525302, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.525364, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.525427, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.525463, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11905 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.525776, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.528564, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.528633, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.528694, 3] smbd/process.c:1661(process_smb) > Transaction 187 of length 182 (0 toread) >[2011/12/15 11:33:49.528754, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.528790, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11969 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.529685, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.529996, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.530058, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.530123, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.530189, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.530252, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.530321, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.530389, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.530461, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.530525, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.530598, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.530660, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.530722, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.530758, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=11969 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.531072, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.533804, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.533875, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.533936, 3] smbd/process.c:1661(process_smb) > Transaction 188 of length 192 (0 toread) >[2011/12/15 11:33:49.533996, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.534032, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12033 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.534939, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.535292, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.535355, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.535419, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.535485, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.535549, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.535618, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.535686, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.535746, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.535808, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.535880, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.535942, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.536005, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.536041, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12033 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.536355, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.539110, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.539254, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.539328, 3] smbd/process.c:1661(process_smb) > Transaction 189 of length 182 (0 toread) >[2011/12/15 11:33:49.539399, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.539442, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12097 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.540521, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.540983, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.541071, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.541156, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.541239, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.541319, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.541406, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.541496, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.541569, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.541644, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.541737, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.541814, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.541890, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.541934, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12097 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.542308, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.545468, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.545622, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.545696, 3] smbd/process.c:1661(process_smb) > Transaction 190 of length 192 (0 toread) >[2011/12/15 11:33:49.545767, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.545810, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12161 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.546909, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.547432, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.547523, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.547608, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.547691, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.547772, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.547859, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.547949, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.548022, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.548096, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.548191, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.548267, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.548343, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.548386, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12161 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.548761, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.551906, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.552060, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.552135, 3] smbd/process.c:1661(process_smb) > Transaction 191 of length 182 (0 toread) >[2011/12/15 11:33:49.552217, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.552265, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12225 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.553426, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 42 00 6E .l.d.e.r .:...B.n > [0020] 00 68 00 71 00 6C 00 6B 00 75 00 67 00 42 00 69 .h.q.l.k .u.g.B.i > [0030] 00 6D 00 30 00 65 00 6C 00 67 00 31 00 4D 00 31 .m.0.e.l .g.1.M.1 > [0040] 00 70 00 74 00 32 00 74 00 6A 00 64 00 5A 00 65 .p.t.2.t .j.d.Z.e > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.553905, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.553989, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.554074, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.554158, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.554238, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.554342, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.554430, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.554525, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.554601, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.554694, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.554772, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.554848, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.554890, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12225 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.555265, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.558187, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.558340, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.558415, 3] smbd/process.c:1661(process_smb) > Transaction 192 of length 192 (0 toread) >[2011/12/15 11:33:49.558504, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.558547, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12289 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.559623, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 42 00 6E 00 68 00 71 00 6C .f._...B .n.h.q.l > [0030] 00 6B 00 75 00 67 00 42 00 69 00 6D 00 30 00 65 .k.u.g.B .i.m.0.e > [0040] 00 6C 00 67 00 31 00 4D 00 31 00 70 00 74 00 32 .l.g.1.M .1.p.t.2 > [0050] 00 74 00 6A 00 64 00 5A 00 65 00 3A 00 24 00 44 .t.j.d.Z .e.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.560144, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.560234, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.560318, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.560402, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA" >[2011/12/15 11:33:49.560482, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.560569, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.560656, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.560730, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.560804, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_BnhqlkugBim0elg1M1pt2tjdZe:$DATA >[2011/12/15 11:33:49.560898, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.560975, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.561051, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.561094, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12289 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.561471, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.564546, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.564698, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.564772, 3] smbd/process.c:1661(process_smb) > Transaction 193 of length 182 (0 toread) >[2011/12/15 11:33:49.564843, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.564886, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12353 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.565960, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.566420, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.566529, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.566613, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.566697, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.566774, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.566848, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.566920, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.566981, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.567044, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.567118, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.567183, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.567246, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.567282, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12353 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.567596, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.570820, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.570893, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.570954, 3] smbd/process.c:1661(process_smb) > Transaction 194 of length 192 (0 toread) >[2011/12/15 11:33:49.571015, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.571051, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12417 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.572259, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.572617, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.572680, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.572745, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.572811, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.572876, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.572946, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.573015, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.573075, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.573137, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.573210, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.573274, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.573336, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.573372, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12417 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.573692, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.575908, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.575978, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.576039, 3] smbd/process.c:1661(process_smb) > Transaction 195 of length 182 (0 toread) >[2011/12/15 11:33:49.576099, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.576135, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12481 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.577041, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.577353, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.577416, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.577485, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.577551, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.577615, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.577684, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.577753, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.577813, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.577875, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.577947, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.578009, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.578071, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.578108, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12481 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.578421, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.581177, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.581247, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.581307, 3] smbd/process.c:1661(process_smb) > Transaction 196 of length 192 (0 toread) >[2011/12/15 11:33:49.581367, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.581403, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12545 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.582285, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.582665, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.582728, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.582793, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.582859, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.582923, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.582991, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.583060, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.583120, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.583182, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.583255, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.583317, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.583380, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.583416, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12545 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.583730, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.586425, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.586507, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.586568, 3] smbd/process.c:1661(process_smb) > Transaction 197 of length 182 (0 toread) >[2011/12/15 11:33:49.586628, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.586664, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12609 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.587540, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.587870, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.587932, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.587996, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.588062, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.588126, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.588195, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.588263, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.588324, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.588385, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.588457, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.588519, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.588582, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.588618, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12609 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.588931, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.591634, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.591706, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.591766, 3] smbd/process.c:1661(process_smb) > Transaction 198 of length 192 (0 toread) >[2011/12/15 11:33:49.591826, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.591862, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12673 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.592738, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.593109, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.593171, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.593236, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.593302, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.593366, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.593434, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.593503, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.593563, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.593625, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.593697, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.593759, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.593822, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.593858, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12673 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.594172, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.596932, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.597002, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.597062, 3] smbd/process.c:1661(process_smb) > Transaction 199 of length 182 (0 toread) >[2011/12/15 11:33:49.597122, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.597158, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12737 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.598035, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.598365, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.598427, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.598504, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.598571, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.598635, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.598703, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.598772, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.598832, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.598894, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.598966, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.599028, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.599090, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.599126, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12737 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.599440, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.599487, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:49.599550, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:49.599609, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:49.599726, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:49.602170, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.602240, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.602301, 3] smbd/process.c:1661(process_smb) > Transaction 200 of length 192 (0 toread) >[2011/12/15 11:33:49.602361, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.602397, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12801 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.603306, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.603660, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.603723, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:49.603789, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:49.603875, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:49.603955, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:49.604022, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:49.604086, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:49.604327, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:49.604447, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:49.604517, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.604583, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.604647, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.604716, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.604785, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.604845, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.604907, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.604979, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.605041, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.605104, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.605140, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12801 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.605478, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.608552, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.608622, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.608682, 3] smbd/process.c:1661(process_smb) > Transaction 201 of length 182 (0 toread) >[2011/12/15 11:33:49.608742, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.608778, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12865 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.609659, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.609970, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.610032, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.610096, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.610162, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.610226, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.610294, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.610363, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.610423, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.610493, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.610566, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.610628, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.610690, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.610726, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12865 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.611056, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.613850, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.613953, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.614016, 3] smbd/process.c:1661(process_smb) > Transaction 202 of length 192 (0 toread) >[2011/12/15 11:33:49.614076, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.614112, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12929 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.615006, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.615360, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.615423, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.615490, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.615558, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.615624, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.615695, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.615764, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.615825, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.615887, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.615961, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.616025, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.616088, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.616124, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12929 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.616460, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.619187, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.619258, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.619319, 3] smbd/process.c:1661(process_smb) > Transaction 203 of length 182 (0 toread) >[2011/12/15 11:33:49.619380, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.619415, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12993 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.620292, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 50 00 65 .l.d.e.r .:...P.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.620603, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.620665, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.620730, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.620796, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.620860, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.620928, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.620997, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.621058, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.621119, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.621191, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.621253, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.621316, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.621352, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=12993 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.621666, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.624414, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.624502, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.624563, 3] smbd/process.c:1661(process_smb) > Transaction 204 of length 192 (0 toread) >[2011/12/15 11:33:49.624623, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.624659, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13057 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.625535, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 50 00 65 00 62 00 69 00 65 .f._...P .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.625888, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.625949, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.626013, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.626080, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.626144, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.626212, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.626281, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.626341, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.626402, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_PebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.626490, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.626552, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.626615, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.626651, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13057 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.626965, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.629633, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.629723, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.629784, 3] smbd/process.c:1661(process_smb) > Transaction 205 of length 182 (0 toread) >[2011/12/15 11:33:49.629844, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.629880, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13121 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.630769, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.631081, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.631143, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.631208, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.631274, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.631338, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.631407, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.631475, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.631536, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.631597, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.631669, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.631732, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.631794, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.631830, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13121 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.632144, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.634878, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.634949, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.635028, 3] smbd/process.c:1661(process_smb) > Transaction 206 of length 192 (0 toread) >[2011/12/15 11:33:49.635089, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.635125, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13185 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.636000, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.636354, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.636416, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.636480, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.636546, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.636610, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.636679, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.636747, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.636807, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.636869, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.636941, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.637003, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.637066, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.637102, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13185 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.637415, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.640198, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.640356, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.640462, 3] smbd/process.c:1661(process_smb) > Transaction 207 of length 182 (0 toread) >[2011/12/15 11:33:49.640534, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.640578, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13249 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.641622, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.642086, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.642175, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.642260, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.642343, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.642423, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.642574, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.642664, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.642737, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.642812, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.642906, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.642983, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.643059, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.643102, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13249 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.643476, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.646653, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.646806, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.646880, 3] smbd/process.c:1661(process_smb) > Transaction 208 of length 192 (0 toread) >[2011/12/15 11:33:49.646985, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.647030, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13313 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.648114, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.648634, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.648725, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.648809, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.648893, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.648972, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.649060, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.649148, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.649221, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.649295, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.649389, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.649468, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.649545, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.649588, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13313 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.649963, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.653058, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.653217, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.653292, 3] smbd/process.c:1661(process_smb) > Transaction 209 of length 182 (0 toread) >[2011/12/15 11:33:49.653393, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.653436, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13377 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.654505, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.654967, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.655057, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.655143, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.655227, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.655307, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.655394, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.655483, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.655555, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.655630, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.655723, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.655801, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.655878, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.655921, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13377 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.656297, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.659392, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.659546, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.659620, 3] smbd/process.c:1661(process_smb) > Transaction 210 of length 192 (0 toread) >[2011/12/15 11:33:49.659692, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.659765, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13441 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.660810, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.661330, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.661421, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.661509, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.661592, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.661671, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.661759, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.661847, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.661919, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.661994, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.662088, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.662166, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.662243, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.662286, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13441 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.662684, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.665758, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.665887, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.665949, 3] smbd/process.c:1661(process_smb) > Transaction 211 of length 182 (0 toread) >[2011/12/15 11:33:49.666009, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.666069, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13505 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.666964, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 43 00 70 .l.d.e.r .:...C.p > [0020] 00 64 00 6A 00 78 00 77 00 62 00 68 00 4E 00 32 .d.j.x.w .b.h.N.2 > [0030] 00 71 00 7A 00 65 00 77 00 63 00 6D 00 51 00 70 .q.z.e.w .c.m.Q.p > [0040] 00 63 00 61 00 31 00 6C 00 76 00 79 00 58 00 63 .c.a.1.l .v.y.X.c > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.667278, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.667342, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.667411, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.667480, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.667546, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.667619, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.667691, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.667752, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.667814, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.667889, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.667953, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.668016, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.668052, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13505 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.668366, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.670731, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.670802, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.670863, 3] smbd/process.c:1661(process_smb) > Transaction 212 of length 192 (0 toread) >[2011/12/15 11:33:49.670923, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.670959, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13569 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.671856, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 43 00 70 00 64 00 6A 00 78 .f._...C .p.d.j.x > [0030] 00 77 00 62 00 68 00 4E 00 32 00 71 00 7A 00 65 .w.b.h.N .2.q.z.e > [0040] 00 77 00 63 00 6D 00 51 00 70 00 63 00 61 00 31 .w.c.m.Q .p.c.a.1 > [0050] 00 6C 00 76 00 79 00 58 00 63 00 3A 00 24 00 44 .l.v.y.X .c.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.672208, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.672271, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.672335, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.672401, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA" >[2011/12/15 11:33:49.672465, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.672534, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.672602, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.672663, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.672725, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_CpdjxwbhN2qzewcmQpca1lvyXc:$DATA >[2011/12/15 11:33:49.672811, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.672874, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.672937, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.672972, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13569 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.673287, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.675959, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.676031, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.676091, 3] smbd/process.c:1661(process_smb) > Transaction 213 of length 166 (0 toread) >[2011/12/15 11:33:49.676152, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.676187, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13633 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.677081, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.677348, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.677410, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.677473, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.677540, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.677604, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.677672, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.677741, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.677801, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.677863, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.677935, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.677997, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.678059, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.678095, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13633 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.678409, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.681197, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.681269, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.681329, 3] smbd/process.c:1661(process_smb) > Transaction 214 of length 176 (0 toread) >[2011/12/15 11:33:49.681389, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.681425, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13697 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.682325, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.682641, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.682703, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.682767, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.682834, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.682898, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.682967, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.683035, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.683095, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.683157, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.683229, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.683292, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.683354, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.683390, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13697 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.683704, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.686428, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 162 >[2011/12/15 11:33:49.686510, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xa2 >[2011/12/15 11:33:49.686571, 3] smbd/process.c:1661(process_smb) > Transaction 215 of length 166 (0 toread) >[2011/12/15 11:33:49.686631, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.686667, 5] lib/util.c:342(show_msg) > size=162 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13761 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=19456 (0x4C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=79 >[2011/12/15 11:33:49.687562, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 53 00 75 .l.d.e.r .:...S.u > [0020] 00 6D 00 6D 00 61 00 72 00 79 00 49 00 6E 00 66 .m.m.a.r .y.I.n.f > [0030] 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 6E .o.r.m.a .t.i.o.n > [0040] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.687828, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.687891, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.687954, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.688020, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:SummaryInformation:$DATA" >[2011/12/15 11:33:49.688084, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.688153, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.688221, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.688281, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.688343, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:SummaryInformation:$DATA >[2011/12/15 11:33:49.688415, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.688477, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.688540, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.688575, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13761 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.688889, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.691638, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 172 >[2011/12/15 11:33:49.691710, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xac >[2011/12/15 11:33:49.691770, 3] smbd/process.c:1661(process_smb) > Transaction 216 of length 176 (0 toread) >[2011/12/15 11:33:49.691831, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.691866, 5] lib/util.c:342(show_msg) > size=172 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13825 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=22016 (0x5600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=89 >[2011/12/15 11:33:49.692761, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 53 00 75 00 6D 00 6D 00 61 .f._...S .u.m.m.a > [0030] 00 72 00 79 00 49 00 6E 00 66 00 6F 00 72 00 6D .r.y.I.n .f.o.r.m > [0040] 00 61 00 74 00 69 00 6F 00 6E 00 3A 00 24 00 44 .a.t.i.o .n.:.$.D > [0050] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.693068, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.693130, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.693194, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.693260, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_SummaryInformation:$DATA" >[2011/12/15 11:33:49.693324, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.693393, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.693461, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.693522, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.693583, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_SummaryInformation:$DATA >[2011/12/15 11:33:49.693656, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.693718, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.693780, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.693816, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13825 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.694130, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.696860, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.696929, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.696990, 3] smbd/process.c:1661(process_smb) > Transaction 217 of length 182 (0 toread) >[2011/12/15 11:33:49.697050, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.697086, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13889 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.697981, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.698293, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.698355, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.698419, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.698513, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.698590, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.698660, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.698729, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.698789, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.698850, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.698923, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.698985, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.699048, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.699084, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13889 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.699398, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.702098, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.702170, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.702230, 3] smbd/process.c:1661(process_smb) > Transaction 218 of length 192 (0 toread) >[2011/12/15 11:33:49.702290, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.702326, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13953 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.703234, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.703588, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.703650, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.703715, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.703781, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.703845, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.703913, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.703981, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.704042, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.704103, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.704176, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.704238, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.704300, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.704336, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=13953 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.704650, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.707367, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.707438, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.707498, 3] smbd/process.c:1661(process_smb) > Transaction 219 of length 182 (0 toread) >[2011/12/15 11:33:49.707558, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.707594, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14017 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.708487, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.708798, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.708860, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.708924, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.708990, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.709054, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.709122, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.709191, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.709251, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.709312, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.709384, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.709446, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.709509, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.709545, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14017 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.709858, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.712651, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.712720, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.712781, 3] smbd/process.c:1661(process_smb) > Transaction 220 of length 192 (0 toread) >[2011/12/15 11:33:49.712841, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.712876, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14081 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.713752, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.714123, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.714186, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.714249, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.714315, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.714379, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.714459, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.714529, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.714589, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.714651, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.714723, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.714785, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.714848, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.714884, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14081 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.715197, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.717934, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.718005, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.718065, 3] smbd/process.c:1661(process_smb) > Transaction 221 of length 182 (0 toread) >[2011/12/15 11:33:49.718125, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.718161, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14145 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.719048, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.719378, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.719440, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.719504, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.719570, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.719634, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.719702, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.719771, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.719831, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.719892, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.719964, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.720026, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.720089, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.720125, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14145 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.720439, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.723160, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.723232, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.723293, 3] smbd/process.c:1661(process_smb) > Transaction 222 of length 192 (0 toread) >[2011/12/15 11:33:49.723353, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.723389, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14209 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.724264, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.724636, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.724698, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.724763, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.724829, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.724893, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.724962, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.725031, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.725091, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.725152, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.725225, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.725287, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.725350, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.725386, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14209 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.725705, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.728336, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.728406, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.728466, 3] smbd/process.c:1661(process_smb) > Transaction 223 of length 182 (0 toread) >[2011/12/15 11:33:49.728527, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.728562, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14273 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.729438, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.729771, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.729834, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.729898, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.729963, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.730027, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.730096, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.730164, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.730224, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.730286, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.730358, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.730420, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.730490, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.730527, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14273 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.730840, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.733648, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.733719, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.733780, 3] smbd/process.c:1661(process_smb) > Transaction 224 of length 192 (0 toread) >[2011/12/15 11:33:49.733840, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.733876, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14337 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.734764, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.735135, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.735197, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.735261, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.735328, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.735391, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.735460, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.735529, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.735589, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.735650, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.735723, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.735785, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.735848, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.735884, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14337 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.736197, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.738936, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.739094, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.739169, 3] smbd/process.c:1661(process_smb) > Transaction 225 of length 182 (0 toread) >[2011/12/15 11:33:49.739240, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.739283, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14401 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.740316, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.740804, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.740896, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.740980, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.741062, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.741141, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.741227, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.741315, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.741386, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.741463, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.741556, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.741634, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.741710, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.741753, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14401 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.742126, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.744207, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.744359, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.744433, 3] smbd/process.c:1661(process_smb) > Transaction 226 of length 192 (0 toread) >[2011/12/15 11:33:49.744504, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.744548, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14465 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.745591, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.746142, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.746234, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.746318, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.746402, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.746503, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.746590, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.746679, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.746752, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.746826, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.746920, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.746998, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.747075, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.747118, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14465 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.747493, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.749510, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 178 >[2011/12/15 11:33:49.749662, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xb2 >[2011/12/15 11:33:49.749737, 3] smbd/process.c:1661(process_smb) > Transaction 227 of length 182 (0 toread) >[2011/12/15 11:33:49.749808, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.749851, 5] lib/util.c:342(show_msg) > size=178 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14529 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=23552 (0x5C00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=95 >[2011/12/15 11:33:49.750910, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 05 00 51 00 65 .l.d.e.r .:...Q.e > [0020] 00 62 00 69 00 65 00 73 00 6E 00 72 00 4D 00 6B .b.i.e.s .n.r.M.k > [0030] 00 75 00 64 00 72 00 66 00 63 00 6F 00 49 00 61 .u.d.r.f .c.o.I.a > [0040] 00 61 00 6D 00 74 00 79 00 6B 00 64 00 44 00 61 .a.m.t.y .k.d.D.a > [0050] 00 3A 00 24 00 44 00 41 00 54 00 41 00 00 00 .:.$.D.A .T.A... >[2011/12/15 11:33:49.751405, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.751502, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.751595, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.751690, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.751782, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.751880, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.751978, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.752060, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.752138, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.752247, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.752325, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.752399, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.752442, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14529 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.752815, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.755971, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 188 >[2011/12/15 11:33:49.756123, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0xbc >[2011/12/15 11:33:49.756197, 3] smbd/process.c:1661(process_smb) > Transaction 228 of length 192 (0 toread) >[2011/12/15 11:33:49.756269, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.756312, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14593 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]=26112 (0x6600) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=105 >[2011/12/15 11:33:49.757356, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 66 00 6F .\.t.e.s .t._.f.o > [0010] 00 6C 00 64 00 65 00 72 00 3A 00 44 00 6F 00 63 .l.d.e.r .:.D.o.c > [0020] 00 66 00 5F 00 05 00 51 00 65 00 62 00 69 00 65 .f._...Q .e.b.i.e > [0030] 00 73 00 6E 00 72 00 4D 00 6B 00 75 00 64 00 72 .s.n.r.M .k.u.d.r > [0040] 00 66 00 63 00 6F 00 49 00 61 00 61 00 6D 00 74 .f.c.o.I .a.a.m.t > [0050] 00 79 00 6B 00 64 00 44 00 61 00 3A 00 24 00 44 .y.k.d.D .a.:.$.D > [0060] 00 41 00 54 00 41 00 00 00 .A.T.A.. . >[2011/12/15 11:33:49.757911, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.758004, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.758090, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.758173, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA" >[2011/12/15 11:33:49.758253, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_FOLDER] -> [test_folder] >[2011/12/15 11:33:49.758340, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_folder] [/mnt/public] >[2011/12/15 11:33:49.758428, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_folder] -> [/mnt/public/test_folder] >[2011/12/15 11:33:49.758522, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_folder reduced to /mnt/public/test_folder >[2011/12/15 11:33:49.758597, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_folder:Docf_QebiesnrMkudrfcoIaamtykdDa:$DATA >[2011/12/15 11:33:49.758692, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.758768, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:49.758845, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.758887, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14593 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.759262, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.761236, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:49.761387, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:49.761465, 3] smbd/process.c:1661(process_smb) > Transaction 229 of length 45 (0 toread) >[2011/12/15 11:33:49.761537, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.761581, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=14657 > smt_wct=3 > smb_vwv[ 0]= 8614 (0x21A6) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:49.762040, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.762102, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.762178, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.762252, 3] smbd/reply.c:4841(reply_close) > close directory fnum=8614 >[2011/12/15 11:33:49.762342, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 0007000000000000518E >[2011/12/15 11:33:49.762435, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0e7e8 >[2011/12/15 11:33:49.762531, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 10:55:48 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.762660, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x1d01, type= 0x0, gen_id = 66, uid = 65534, flags = 0, file_id 700:8e51:0, name_hash = 0x39173e53 >[2011/12/15 11:33:49.762772, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x39173e53 >[2011/12/15 11:33:49.762862, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 0007000000000000518E >[2011/12/15 11:33:49.762964, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_folder = 0 >[2011/12/15 11:33:49.764266, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_folder >[2011/12/15 11:33:49.764388, 5] smbd/files.c:464(file_free) > freed files structure 8614 (1 used) >[2011/12/15 11:33:49.764469, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.764513, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=14657 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:49.764889, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.768654, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:49.768784, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:49.768847, 3] smbd/process.c:1661(process_smb) > Transaction 230 of length 112 (0 toread) >[2011/12/15 11:33:49.768907, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.768944, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14721 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:33:49.769614, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:33:49.769790, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.769854, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.769923, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:49.769997, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:49.770063, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [TEST_IMG.BMP] >[2011/12/15 11:33:49.770125, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = test_img.bmp, dirpath = , start = test_img.bmp >[2011/12/15 11:33:49.770196, 5] smbd/statcache.c:143(stat_cache_add) > stat_cache_add: Added entry (21a0e8e8:size c) TEST_IMG.BMP -> test_img.bmp >[2011/12/15 11:33:49.770258, 5] smbd/filename.c:439(unix_convert) > conversion of base_name finished test_img.bmp -> test_img.bmp >[2011/12/15 11:33:49.770320, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:49.770394, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:49.770465, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:49.770529, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:33:49.770591, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:49.770651, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:49.770742, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:49.770804, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:49.770877, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:49.770938, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:33:49.770999, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:49.771076, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219ed2c8 now at offset -1 >[2011/12/15 11:33:49.771143, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:49.771206, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:49.771268, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:49.771351, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:49.771412, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:49.771481, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:49.771542, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:49.771607, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:49.771668, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:49.771738, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:33:49.771800, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:33:49.771861, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.771897, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14721 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:33:49.772446, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0020] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:33:49.772919, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:49.798634, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:33:49.798710, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:33:49.798771, 3] smbd/process.c:1661(process_smb) > Transaction 231 of length 116 (0 toread) >[2011/12/15 11:33:49.798831, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.798867, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14785 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=29 >[2011/12/15 11:33:49.799761, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:33:49.799889, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.799951, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.800015, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:33:49.800082, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:49.800147, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:49.800213, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:49.800283, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:49.800343, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:49.800404, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:49.800474, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:49.800541, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:49.800601, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:49.800662, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:49.800733, 5] smbd/files.c:126(file_new) > allocated file structure 4519, fnum = 8615 (2 used) >[2011/12/15 11:33:49.800800, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:33:49.800864, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_img.bmp) returning 0744 >[2011/12/15 11:33:49.800926, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:49.800992, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:49.801060, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:49.801120, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:49.801199, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:49.801260, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:49.801322, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:49.801386, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, after mapping access_mask=0x20089 >[2011/12/15 11:33:49.801459, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:49.801532, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebd8 >[2011/12/15 11:33:49.801593, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:c:0 >[2011/12/15 11:33:49.801658, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:49.801740, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:49.801805, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed48 >[2011/12/15 11:33:49.801868, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_img.bmp >[2011/12/15 11:33:49.801930, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:49.801999, 10] smbd/open.c:179(fd_open) > fd_open: name test_img.bmp, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:49.802062, 2] smbd/open.c:694(open_file) > nobody opened file test_img.bmp read=Yes write=No (numopen=2) >[2011/12/15 11:33:49.802135, 3] smbd/oplock_linux.c:129(linux_set_kernel_oplock) > linux_set_kernel_oplock: got kernel oplock on file test_img.bmp, file_id = 700:c:0 gen_id = 67 >[2011/12/15 11:33:49.802200, 5] smbd/oplock.c:92(set_file_oplock) > set_file_oplock: granted oplock on file test_img.bmp, 700:c:0/67, tv_sec = 4ee9a2dd, tv_usec = c37da >[2011/12/15 11:33:49.802269, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:33:49.802371, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x39c1, type= 0x3, gen_id = 67, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:49.802468, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:49.802544, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:49.802605, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:49.802667, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:49.802728, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:49.802789, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:49.802859, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.802957, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x39c1, type= 0x3, gen_id = 67, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:49.803030, 10] smbd/file_access.c:207(can_access_file_data) > can_access_file_data: requesting 0x2 on file test_img.bmp >[2011/12/15 11:33:49.803093, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8615, open name = test_img.bmp >[2011/12/15 11:33:49.806505, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 72 >[2011/12/15 11:33:49.806577, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x48 >[2011/12/15 11:33:49.806658, 3] smbd/process.c:1661(process_smb) > Transaction 232 of length 76 (0 toread) >[2011/12/15 11:33:49.806718, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.806754, 5] lib/util.c:342(show_msg) > size=72 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14849 > smt_wct=15 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4 (0x4) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 7 (0x7) > smb_bcc=7 >[2011/12/15 11:33:49.807422, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 A7 21 EE 03 ....!.. >[2011/12/15 11:33:49.807502, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.807564, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.807627, 3] smbd/trans2.c:5032(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006 >[2011/12/15 11:33:49.807701, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:49.807798, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x39c1, type= 0x3, gen_id = 67, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:49.807862, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:33:49.807924, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_img.bmp (fnum = 8615) level=1006 call=7 total_data=0 >[2011/12/15 11:33:49.807986, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_img.bmp (fnum = 8615) level=1006 max_data=40 >[2011/12/15 11:33:49.808048, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:49.808109, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:49.808171, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:49.808238, 10] smbd/trans2.c:4620(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION >[2011/12/15 11:33:49.808300, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 16582 >[2011/12/15 11:33:49.808361, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8 >[2011/12/15 11:33:49.808422, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.808458, 5] lib/util.c:342(show_msg) > size=68 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=14849 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 8 (0x8) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 8 (0x8) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=13 >[2011/12/15 11:33:49.809012, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 0C 00 00 00 00 00 00 00 ........ ..... >[2011/12/15 11:33:49.811696, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:49.811766, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:49.811826, 3] smbd/process.c:1661(process_smb) > Transaction 233 of length 63 (0 toread) >[2011/12/15 11:33:49.811886, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:49.811922, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=14913 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8615 (0x21A7) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:49.812540, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:49.812578, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:49.812641, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:49.812705, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:49.812767, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 8615 file test_img.bmp >[2011/12/15 11:33:49.812874, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 0, size = 4096, returned 4096 >[2011/12/15 11:33:49.812941, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8615 max=4096 nread=4096 >[2011/12/15 11:33:50.001577, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:50.001723, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:50.001788, 3] smbd/process.c:1661(process_smb) > Transaction 234 of length 45 (0 toread) >[2011/12/15 11:33:50.001848, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.001885, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=14977 > smt_wct=3 > smb_vwv[ 0]= 8615 (0x21A7) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:50.002271, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.002311, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.002375, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.002438, 3] smbd/reply.c:4851(reply_close) > close fd=33 fnum=8615 (numopen=2) >[2011/12/15 11:33:50.002512, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:50.002592, 10] smbd/oplock_linux.c:141(linux_release_kernel_oplock) > linux_release_kernel_oplock: file test_img.bmp, file_id = 700:c:0 gen_id = 67 has kernel oplock state of 1. >[2011/12/15 11:33:50.002681, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:50.002756, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a108b0 >[2011/12/15 11:33:50.002817, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:50.002918, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x39c1, type= 0x3, gen_id = 67, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:50.002985, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:33:50.003051, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:50.003129, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_img.bmp = 0 >[2011/12/15 11:33:50.003193, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_img.bmp >[2011/12/15 11:33:50.003264, 2] smbd/close.c:691(close_normal_file) > nobody closed file test_img.bmp (numopen=1) NT_STATUS_OK >[2011/12/15 11:33:50.003361, 5] smbd/files.c:464(file_free) > freed files structure 8615 (1 used) >[2011/12/15 11:33:50.003426, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.003463, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=14977 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:50.003777, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.020550, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 106 >[2011/12/15 11:33:50.020635, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6a >[2011/12/15 11:33:50.020697, 3] smbd/process.c:1661(process_smb) > Transaction 235 of length 110 (0 toread) >[2011/12/15 11:33:50.020757, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.020794, 5] lib/util.c:342(show_msg) > size=106 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=15041 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 5120 (0x1400) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 256 (0x100) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=23 >[2011/12/15 11:33:50.021676, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 54 00 68 00 75 00 6D 00 62 00 73 00 2E .\.T.h.u .m.b.s.. > [0010] 00 64 00 62 00 00 00 .d.b... >[2011/12/15 11:33:50.021801, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.021864, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.021931, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = Thumbs.db >[2011/12/15 11:33:50.022000, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "Thumbs.db" >[2011/12/15 11:33:50.022066, 10] smbd/statcache.c:241(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [THUMBS.DB] >[2011/12/15 11:33:50.022129, 5] smbd/filename.c:416(unix_convert) > unix_convert begin: name = Thumbs.db, dirpath = , start = Thumbs.db >[2011/12/15 11:33:50.022203, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:33:50.022264, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:33:50.022329, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:33:50.022389, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:33:50.022499, 10] smbd/mangle_hash2.c:418(is_mangled) > is_mangled Thumbs.db ? >[2011/12/15 11:33:50.022562, 10] smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component Thumbs.db (len 9) ? >[2011/12/15 11:33:50.022622, 5] smbd/filename.c:781(unix_convert) > New file Thumbs.db >[2011/12/15 11:33:50.022683, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:33:50.022764, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:33:50.022826, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:33:50.022888, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = Thumbs.db >[2011/12/15 11:33:50.022976, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:33:50.023052, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:33:50.023113, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:33:50.023173, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x80, share_access = 0x1, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = Thumbs.db >[2011/12/15 11:33:50.023244, 5] smbd/files.c:126(file_new) > allocated file structure 4520, fnum = 8616 (2 used) >[2011/12/15 11:33:50.023312, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/Thumbs.db hash 0x4464db49 >[2011/12/15 11:33:50.023376, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(Thumbs.db) returning 0744 >[2011/12/15 11:33:50.023438, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=Thumbs.db, dos_attrs=0x80 access_mask=0x20089 share_access=0x1 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:50.023504, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [Thumbs.db] [/mnt/public] >[2011/12/15 11:33:50.023579, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [Thumbs.db] -> [/mnt/public/Thumbs.db] >[2011/12/15 11:33:50.023640, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: Thumbs.db reduced to /mnt/public/Thumbs.db >[2011/12/15 11:33:50.023702, 5] smbd/open.c:1685(open_file_ntcreate) > open_file_ntcreate: FILE_OPEN requested for file Thumbs.db and file doesn't exist. >[2011/12/15 11:33:50.023765, 5] smbd/files.c:464(file_free) > freed files structure 8616 (1 used) >[2011/12/15 11:33:50.023826, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:50.023887, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:50.023949, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND >[2011/12/15 11:33:50.024012, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.024048, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=52 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=15041 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:50.024362, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.027207, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:33:50.027279, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:33:50.027339, 3] smbd/process.c:1661(process_smb) > Transaction 236 of length 116 (0 toread) >[2011/12/15 11:33:50.027399, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.027435, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=15105 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=35072 (0x8900) > smb_vwv[ 8]= 512 (0x200) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]=16384 (0x4000) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=29 >[2011/12/15 11:33:50.028330, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:33:50.028458, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.028521, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.028584, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:33:50.028651, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:50.028715, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:50.028782, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:50.028851, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:50.028912, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:50.028973, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:50.029041, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:50.029109, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:50.029169, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:50.029230, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x20089 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:50.029300, 5] smbd/files.c:126(file_new) > allocated file structure 4521, fnum = 8617 (2 used) >[2011/12/15 11:33:50.029367, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:33:50.029430, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(test_img.bmp) returning 0744 >[2011/12/15 11:33:50.029496, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, dos_attrs=0x0 access_mask=0x20089 share_access=0x7 create_disposition = 0x1 create_options=0x40 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:50.029562, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:50.029631, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:50.029691, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:50.029752, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:50.029813, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:50.029875, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:50.029939, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=test_img.bmp, after mapping access_mask=0x20089 >[2011/12/15 11:33:50.030012, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:50.030081, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ebd8 >[2011/12/15 11:33:50.030160, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:c:0 >[2011/12/15 11:33:50.030225, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:50.030308, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:50.030375, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0ed48 >[2011/12/15 11:33:50.030437, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x3 on file test_img.bmp >[2011/12/15 11:33:50.030509, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x20089, open_access_mask = 0x20089 >[2011/12/15 11:33:50.030577, 10] smbd/open.c:179(fd_open) > fd_open: name test_img.bmp, flags = 0400000 mode = 0744, fd = 33. >[2011/12/15 11:33:50.030640, 2] smbd/open.c:694(open_file) > nobody opened file test_img.bmp read=Yes write=No (numopen=2) >[2011/12/15 11:33:50.030708, 3] smbd/oplock_linux.c:129(linux_set_kernel_oplock) > linux_set_kernel_oplock: got kernel oplock on file test_img.bmp, file_id = 700:c:0 gen_id = 69 >[2011/12/15 11:33:50.030773, 5] smbd/oplock.c:92(set_file_oplock) > set_file_oplock: granted oplock on file test_img.bmp, 700:c:0/69, tv_sec = 4ee9a2de, tv_usec = 7271 >[2011/12/15 11:33:50.030841, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 1 >[2011/12/15 11:33:50.030941, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:50.031009, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:50.031083, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:50.031143, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:50.031205, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:50.031266, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:50.031327, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:50.031397, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:50.031494, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:50.031568, 10] smbd/file_access.c:207(can_access_file_data) > can_access_file_data: requesting 0x2 on file test_img.bmp >[2011/12/15 11:33:50.031631, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8617, open name = test_img.bmp >[2011/12/15 11:33:50.036392, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.036464, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.036524, 3] smbd/process.c:1661(process_smb) > Transaction 237 of length 63 (0 toread) >[2011/12/15 11:33:50.036584, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.036620, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15169 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.037242, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.037294, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.037371, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.037450, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.037525, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=0 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.037623, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 0, size = 4096, returned 4096 >[2011/12/15 11:33:50.037702, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.042478, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.042637, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.042711, 3] smbd/process.c:1661(process_smb) > Transaction 238 of length 63 (0 toread) >[2011/12/15 11:33:50.042784, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.042828, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15233 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 2986 (0xBAA) > smb_vwv[ 6]= 2986 (0xBAA) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2986 (0xBAA) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.043545, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.043615, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.043692, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.043777, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.043853, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=217088 len=2986 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.043957, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 217088, size = 2986, returned 2986 >[2011/12/15 11:33:50.044036, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=2986 nread=2986 >[2011/12/15 11:33:50.047547, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.047703, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.047777, 3] smbd/process.c:1661(process_smb) > Transaction 239 of length 63 (0 toread) >[2011/12/15 11:33:50.047850, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.047893, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15297 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.048612, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.048684, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.048761, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.048845, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.048951, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=212992 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.049056, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 212992, size = 4096, returned 4096 >[2011/12/15 11:33:50.049136, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.053955, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.054114, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.054188, 3] smbd/process.c:1661(process_smb) > Transaction 240 of length 63 (0 toread) >[2011/12/15 11:33:50.054259, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.054302, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15361 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.055036, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.055106, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.055183, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.055268, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.055343, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=208896 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.055444, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 208896, size = 4096, returned 4096 >[2011/12/15 11:33:50.055523, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.060176, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.060333, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.060408, 3] smbd/process.c:1661(process_smb) > Transaction 241 of length 63 (0 toread) >[2011/12/15 11:33:50.060479, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.060522, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15425 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.061234, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.061303, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.061379, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.061463, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.061537, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=204800 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.061638, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 204800, size = 4096, returned 4096 >[2011/12/15 11:33:50.061717, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.066474, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.066630, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.066692, 3] smbd/process.c:1661(process_smb) > Transaction 242 of length 63 (0 toread) >[2011/12/15 11:33:50.066752, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.066789, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15489 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.067387, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.067427, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.067491, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.067560, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.067623, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=200704 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.067706, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 200704, size = 4096, returned 4096 >[2011/12/15 11:33:50.067772, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.071291, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.071363, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.071424, 3] smbd/process.c:1661(process_smb) > Transaction 243 of length 63 (0 toread) >[2011/12/15 11:33:50.071484, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.071520, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15553 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 3 (0x3) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.072117, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.072155, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.072217, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.072280, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.072342, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=196608 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.072417, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 196608, size = 4096, returned 4096 >[2011/12/15 11:33:50.072483, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.077439, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.077511, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.077572, 3] smbd/process.c:1661(process_smb) > Transaction 244 of length 63 (0 toread) >[2011/12/15 11:33:50.077632, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.077668, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15617 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.078286, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.078324, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.078386, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.078461, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.078525, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=192512 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.078602, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 192512, size = 4096, returned 4096 >[2011/12/15 11:33:50.078668, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.082201, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.082274, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.082334, 3] smbd/process.c:1661(process_smb) > Transaction 245 of length 63 (0 toread) >[2011/12/15 11:33:50.082394, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.082430, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15681 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.083039, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.083078, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.083140, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.083203, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.083265, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=188416 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.083341, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 188416, size = 4096, returned 4096 >[2011/12/15 11:33:50.083406, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.086993, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.087065, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.087126, 3] smbd/process.c:1661(process_smb) > Transaction 246 of length 63 (0 toread) >[2011/12/15 11:33:50.087185, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.087221, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15745 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.087818, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.087874, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.087938, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.088001, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.088063, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=184320 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.088138, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 184320, size = 4096, returned 4096 >[2011/12/15 11:33:50.088204, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.093099, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.093169, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.093230, 3] smbd/process.c:1661(process_smb) > Transaction 247 of length 63 (0 toread) >[2011/12/15 11:33:50.093290, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.093326, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15809 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.093922, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.093960, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.094022, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.094085, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.094147, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=180224 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.094222, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 180224, size = 4096, returned 4096 >[2011/12/15 11:33:50.094288, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.097939, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.098010, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.098072, 3] smbd/process.c:1661(process_smb) > Transaction 248 of length 63 (0 toread) >[2011/12/15 11:33:50.098132, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.098168, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15873 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.098775, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.098814, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.098877, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.098939, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.099001, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=176128 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.099097, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 176128, size = 4096, returned 4096 >[2011/12/15 11:33:50.099162, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.102885, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.102958, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.103018, 3] smbd/process.c:1661(process_smb) > Transaction 249 of length 63 (0 toread) >[2011/12/15 11:33:50.103078, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.103113, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=15937 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.103711, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.103749, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.103811, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.103874, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.103936, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=172032 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.104012, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 172032, size = 4096, returned 4096 >[2011/12/15 11:33:50.104077, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.104157, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:50.104219, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:50.104279, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:50.104385, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:50.108938, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.109009, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.109069, 3] smbd/process.c:1661(process_smb) > Transaction 250 of length 63 (0 toread) >[2011/12/15 11:33:50.109129, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.109165, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16001 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.109769, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.109807, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.109871, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:50.109937, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:50.110041, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:50.110122, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:50.110190, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:50.110254, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:50.110504, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:50.110624, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:50.110692, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.110754, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=167936 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.110830, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 167936, size = 4096, returned 4096 >[2011/12/15 11:33:50.110895, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.115342, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.115414, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.115474, 3] smbd/process.c:1661(process_smb) > Transaction 251 of length 63 (0 toread) >[2011/12/15 11:33:50.115534, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.115570, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16065 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.116166, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.116204, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.116266, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.116329, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.116390, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=163840 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.116466, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 163840, size = 4096, returned 4096 >[2011/12/15 11:33:50.116532, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.120089, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.120161, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.120221, 3] smbd/process.c:1661(process_smb) > Transaction 252 of length 63 (0 toread) >[2011/12/15 11:33:50.120281, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.120317, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16129 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.120932, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.120970, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.121032, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.121095, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.121157, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=159744 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.121233, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 159744, size = 4096, returned 4096 >[2011/12/15 11:33:50.121298, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.126120, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.126191, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.126252, 3] smbd/process.c:1661(process_smb) > Transaction 253 of length 63 (0 toread) >[2011/12/15 11:33:50.126311, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.126347, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16193 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.126955, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.126993, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.127056, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.127119, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.127180, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=155648 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.127256, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 155648, size = 4096, returned 4096 >[2011/12/15 11:33:50.127321, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.130970, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.131041, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.131102, 3] smbd/process.c:1661(process_smb) > Transaction 254 of length 63 (0 toread) >[2011/12/15 11:33:50.131162, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.131198, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16257 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.131794, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.131832, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.131894, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.131974, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.132036, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=151552 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.132110, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 151552, size = 4096, returned 4096 >[2011/12/15 11:33:50.132176, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.137033, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.137128, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.137200, 3] smbd/process.c:1661(process_smb) > Transaction 255 of length 63 (0 toread) >[2011/12/15 11:33:50.137272, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.137314, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16321 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.138028, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.138096, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.138173, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.138256, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.138330, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=147456 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.138433, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 147456, size = 4096, returned 4096 >[2011/12/15 11:33:50.138532, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.143248, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.143403, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.143476, 3] smbd/process.c:1661(process_smb) > Transaction 256 of length 63 (0 toread) >[2011/12/15 11:33:50.143548, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.143591, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16385 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.144302, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.144371, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.144448, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.144531, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.144605, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=143360 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.144707, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 143360, size = 4096, returned 4096 >[2011/12/15 11:33:50.144819, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.149512, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.149666, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.149739, 3] smbd/process.c:1661(process_smb) > Transaction 257 of length 63 (0 toread) >[2011/12/15 11:33:50.149811, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.149854, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16449 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.150623, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.150695, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.150782, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.150875, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.150959, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=139264 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.151068, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 139264, size = 4096, returned 4096 >[2011/12/15 11:33:50.151160, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.155609, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.155763, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.155837, 3] smbd/process.c:1661(process_smb) > Transaction 258 of length 63 (0 toread) >[2011/12/15 11:33:50.155908, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.155951, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16513 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.156661, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.156731, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.156808, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.156891, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.156965, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=135168 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.157066, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 135168, size = 4096, returned 4096 >[2011/12/15 11:33:50.157146, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.161783, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.161937, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.162011, 3] smbd/process.c:1661(process_smb) > Transaction 259 of length 63 (0 toread) >[2011/12/15 11:33:50.162114, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.162159, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16577 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 2 (0x2) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.162892, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.162962, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.163039, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.163123, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.163198, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=131072 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.163300, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 131072, size = 4096, returned 4096 >[2011/12/15 11:33:50.163378, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.167837, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.167966, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.168028, 3] smbd/process.c:1661(process_smb) > Transaction 260 of length 63 (0 toread) >[2011/12/15 11:33:50.168088, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.168124, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16641 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.168722, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.168762, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.168825, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.168894, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.168956, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=126976 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.169038, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 126976, size = 4096, returned 4096 >[2011/12/15 11:33:50.169104, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.174002, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.174073, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.174133, 3] smbd/process.c:1661(process_smb) > Transaction 261 of length 63 (0 toread) >[2011/12/15 11:33:50.174193, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.174229, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16705 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.174862, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.174901, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.174964, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.175026, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.175088, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=122880 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.175163, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 122880, size = 4096, returned 4096 >[2011/12/15 11:33:50.175228, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.179068, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.179141, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.179201, 3] smbd/process.c:1661(process_smb) > Transaction 262 of length 63 (0 toread) >[2011/12/15 11:33:50.179261, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.179297, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16769 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.179894, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.179932, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.179994, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.180057, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.180119, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=118784 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.180193, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 118784, size = 4096, returned 4096 >[2011/12/15 11:33:50.180259, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.185211, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.185282, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.185342, 3] smbd/process.c:1661(process_smb) > Transaction 263 of length 63 (0 toread) >[2011/12/15 11:33:50.185402, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.185438, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16833 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.186034, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.186072, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.186134, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.186196, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.186276, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=114688 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.186352, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 114688, size = 4096, returned 4096 >[2011/12/15 11:33:50.186417, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.191376, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.191448, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.191509, 3] smbd/process.c:1661(process_smb) > Transaction 264 of length 63 (0 toread) >[2011/12/15 11:33:50.191569, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.191604, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16897 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.192200, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.192238, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.192301, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.192363, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.192425, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=110592 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.192500, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 110592, size = 4096, returned 4096 >[2011/12/15 11:33:50.192565, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.197461, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.197531, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.197591, 3] smbd/process.c:1661(process_smb) > Transaction 265 of length 63 (0 toread) >[2011/12/15 11:33:50.197651, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.197687, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=16961 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.198283, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.198321, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.198383, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.198455, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.198520, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=106496 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.198594, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 106496, size = 4096, returned 4096 >[2011/12/15 11:33:50.198659, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.203533, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.203607, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.203668, 3] smbd/process.c:1661(process_smb) > Transaction 266 of length 63 (0 toread) >[2011/12/15 11:33:50.203728, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.203763, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17025 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.204360, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.204398, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.204461, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.204524, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.204585, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=102400 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.204661, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 102400, size = 4096, returned 4096 >[2011/12/15 11:33:50.204726, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.208325, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.208396, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.208456, 3] smbd/process.c:1661(process_smb) > Transaction 267 of length 63 (0 toread) >[2011/12/15 11:33:50.208516, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.208552, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17089 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.209148, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.209186, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.209248, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.209311, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.209373, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=98304 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.209448, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 98304, size = 4096, returned 4096 >[2011/12/15 11:33:50.209513, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.214463, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.214567, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.214629, 3] smbd/process.c:1661(process_smb) > Transaction 268 of length 63 (0 toread) >[2011/12/15 11:33:50.214689, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.214725, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17153 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.215347, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.215386, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.215449, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.215515, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.215576, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=94208 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.215656, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 94208, size = 4096, returned 4096 >[2011/12/15 11:33:50.215722, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.220600, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.220671, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.220731, 3] smbd/process.c:1661(process_smb) > Transaction 269 of length 63 (0 toread) >[2011/12/15 11:33:50.220791, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.220827, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17217 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.221426, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.221470, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.221534, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.221597, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.221658, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=90112 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.221733, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 90112, size = 4096, returned 4096 >[2011/12/15 11:33:50.221799, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.225379, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.225449, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.225510, 3] smbd/process.c:1661(process_smb) > Transaction 270 of length 63 (0 toread) >[2011/12/15 11:33:50.225569, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.225605, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17281 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.226222, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.226260, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.226323, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.226385, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.226460, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=86016 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.226537, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 86016, size = 4096, returned 4096 >[2011/12/15 11:33:50.226603, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.230157, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.230229, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.230290, 3] smbd/process.c:1661(process_smb) > Transaction 271 of length 63 (0 toread) >[2011/12/15 11:33:50.230350, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.230385, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17345 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.230995, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.231033, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.231096, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.231158, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.231220, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=81920 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.231294, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 81920, size = 4096, returned 4096 >[2011/12/15 11:33:50.231360, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.235025, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.235096, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.235157, 3] smbd/process.c:1661(process_smb) > Transaction 272 of length 63 (0 toread) >[2011/12/15 11:33:50.235216, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.235252, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17409 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.235848, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.235886, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.235948, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.236011, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.236090, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=77824 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.236166, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 77824, size = 4096, returned 4096 >[2011/12/15 11:33:50.236232, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.239853, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.240012, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.240085, 3] smbd/process.c:1661(process_smb) > Transaction 273 of length 63 (0 toread) >[2011/12/15 11:33:50.240157, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.240200, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17473 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.240913, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.240981, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.241058, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.241142, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.241217, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=73728 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.241318, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 73728, size = 4096, returned 4096 >[2011/12/15 11:33:50.241397, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.246007, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.246162, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.246235, 3] smbd/process.c:1661(process_smb) > Transaction 274 of length 63 (0 toread) >[2011/12/15 11:33:50.246306, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.246349, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17537 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.247083, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.247151, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.247229, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.247312, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.247386, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=69632 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.247486, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 69632, size = 4096, returned 4096 >[2011/12/15 11:33:50.247565, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.250964, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.251152, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.251226, 3] smbd/process.c:1661(process_smb) > Transaction 275 of length 63 (0 toread) >[2011/12/15 11:33:50.251298, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.251341, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17601 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 1 (0x1) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.252054, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.252123, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.252200, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.252284, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.252358, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=65536 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.252459, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 65536, size = 4096, returned 4096 >[2011/12/15 11:33:50.252538, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.257042, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.257196, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.257270, 3] smbd/process.c:1661(process_smb) > Transaction 276 of length 63 (0 toread) >[2011/12/15 11:33:50.257342, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.257385, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17665 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=61440 (0xF000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.258101, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.258170, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.258247, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.258332, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.258407, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=61440 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.258528, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 61440, size = 4096, returned 4096 >[2011/12/15 11:33:50.258607, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.263294, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.263448, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.263521, 3] smbd/process.c:1661(process_smb) > Transaction 277 of length 63 (0 toread) >[2011/12/15 11:33:50.263593, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.263636, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17729 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=57344 (0xE000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.264889, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.264959, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.265044, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.265141, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.265229, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=57344 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.265316, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 57344, size = 4096, returned 4096 >[2011/12/15 11:33:50.265383, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.269263, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.269335, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.269396, 3] smbd/process.c:1661(process_smb) > Transaction 278 of length 63 (0 toread) >[2011/12/15 11:33:50.269457, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.269492, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17793 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=53248 (0xD000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.270090, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.270129, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.270192, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.270255, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.270317, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=53248 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.270392, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 53248, size = 4096, returned 4096 >[2011/12/15 11:33:50.270471, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.274109, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.274182, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.274242, 3] smbd/process.c:1661(process_smb) > Transaction 279 of length 63 (0 toread) >[2011/12/15 11:33:50.274302, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.274338, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17857 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=49152 (0xC000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.274944, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.275005, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.275069, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.275132, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.275194, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=49152 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.275269, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 49152, size = 4096, returned 4096 >[2011/12/15 11:33:50.275335, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.280083, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.280159, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.280221, 3] smbd/process.c:1661(process_smb) > Transaction 280 of length 63 (0 toread) >[2011/12/15 11:33:50.280281, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.280317, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17921 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=45056 (0xB000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.280914, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.280952, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.281015, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.281078, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.281140, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=45056 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.281215, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 45056, size = 4096, returned 4096 >[2011/12/15 11:33:50.281281, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.286243, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.286315, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.286376, 3] smbd/process.c:1661(process_smb) > Transaction 281 of length 63 (0 toread) >[2011/12/15 11:33:50.286435, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.286485, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=17985 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=40960 (0xA000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.287083, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.287121, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.287183, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.287246, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.287308, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=40960 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.287401, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 40960, size = 4096, returned 4096 >[2011/12/15 11:33:50.287467, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.291035, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.291107, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.291167, 3] smbd/process.c:1661(process_smb) > Transaction 282 of length 63 (0 toread) >[2011/12/15 11:33:50.291227, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.291263, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18049 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=36864 (0x9000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.291860, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.291898, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.291960, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.292023, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.292085, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=36864 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.292159, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 36864, size = 4096, returned 4096 >[2011/12/15 11:33:50.292224, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.295786, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.295856, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.295916, 3] smbd/process.c:1661(process_smb) > Transaction 283 of length 63 (0 toread) >[2011/12/15 11:33:50.295975, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.296011, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18113 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=32768 (0x8000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.296607, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.296645, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.296707, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.296770, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.296831, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=32768 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.296907, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 32768, size = 4096, returned 4096 >[2011/12/15 11:33:50.296972, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.300544, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.300614, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.300693, 3] smbd/process.c:1661(process_smb) > Transaction 284 of length 63 (0 toread) >[2011/12/15 11:33:50.300753, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.300789, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18177 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=28672 (0x7000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.301386, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.301423, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.301486, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.301548, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.301610, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=28672 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.301685, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 28672, size = 4096, returned 4096 >[2011/12/15 11:33:50.301750, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.305376, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.305446, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.305507, 3] smbd/process.c:1661(process_smb) > Transaction 285 of length 63 (0 toread) >[2011/12/15 11:33:50.305566, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.305602, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18241 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=24576 (0x6000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.306198, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.306236, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.306299, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.306361, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.306423, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=24576 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.306511, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 24576, size = 4096, returned 4096 >[2011/12/15 11:33:50.306577, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.311419, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.311491, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.311551, 3] smbd/process.c:1661(process_smb) > Transaction 286 of length 63 (0 toread) >[2011/12/15 11:33:50.311611, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.311647, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18305 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=20480 (0x5000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.312262, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.312301, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.312363, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.312426, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.312488, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=20480 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.312562, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 20480, size = 4096, returned 4096 >[2011/12/15 11:33:50.312627, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.317537, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.317607, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.317667, 3] smbd/process.c:1661(process_smb) > Transaction 287 of length 63 (0 toread) >[2011/12/15 11:33:50.317727, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.317763, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18369 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.318360, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.318398, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.318472, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.318537, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.318598, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=16384 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.318673, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 16384, size = 4096, returned 4096 >[2011/12/15 11:33:50.318739, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.322345, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.322417, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.322490, 3] smbd/process.c:1661(process_smb) > Transaction 288 of length 63 (0 toread) >[2011/12/15 11:33:50.322551, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.322587, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18433 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]=12288 (0x3000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.323184, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.323222, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.323302, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.323366, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.323428, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=12288 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.323503, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 12288, size = 4096, returned 4096 >[2011/12/15 11:33:50.323583, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.327131, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.327205, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.327265, 3] smbd/process.c:1661(process_smb) > Transaction 289 of length 63 (0 toread) >[2011/12/15 11:33:50.327325, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.327361, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18497 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 8192 (0x2000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.327957, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.327995, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.328058, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.328122, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.328183, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=8192 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.328258, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 8192, size = 4096, returned 4096 >[2011/12/15 11:33:50.328324, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.331923, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 59 >[2011/12/15 11:33:50.331993, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x3b >[2011/12/15 11:33:50.332054, 3] smbd/process.c:1661(process_smb) > Transaction 290 of length 63 (0 toread) >[2011/12/15 11:33:50.332113, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.332150, 5] lib/util.c:342(show_msg) > size=59 > smb_com=0x2e > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=59399 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18561 > smt_wct=12 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 8617 (0x21A9) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 4096 (0x1000) > smb_vwv[ 6]= 4096 (0x1000) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 4096 (0x1000) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_bcc=0 >[2011/12/15 11:33:50.332746, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:50.332784, 3] smbd/process.c:1466(switch_message) > switch message SMBreadX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.332847, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.332909, 10] locking/locking.c:120(strict_lock_default) > is_locked: optimisation - exclusive oplock on file test_img.bmp >[2011/12/15 11:33:50.332971, 10] locking/locking.c:162(strict_lock_default) > strict_lock_default: flavour = WINDOWS_LOCK brl start=4096 len=4096 unlocked for fnum 8617 file test_img.bmp >[2011/12/15 11:33:50.333046, 10] smbd/fileio.c:109(read_file) > read_file (test_img.bmp): pos = 4096, size = 4096, returned 4096 >[2011/12/15 11:33:50.333131, 3] smbd/reply.c:3700(send_file_readX) > send_file_readX fnum=8617 max=4096 nread=4096 >[2011/12/15 11:33:50.352002, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:50.352165, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:50.352240, 3] smbd/process.c:1661(process_smb) > Transaction 291 of length 112 (0 toread) >[2011/12/15 11:33:50.352311, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.352354, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18625 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:33:50.353153, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:33:50.353422, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.353503, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.353586, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:50.353675, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:50.353758, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:50.353841, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:50.353930, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:50.354003, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:50.354078, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:33:50.354156, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:50.354230, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:50.354306, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:50.354378, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:50.354495, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:50.354571, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:33:50.354644, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:50.354738, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc2a0 now at offset -1 >[2011/12/15 11:33:50.354820, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:50.354895, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:50.354969, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:50.355067, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:50.355230, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:50.355313, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:50.355400, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:50.355473, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:50.355552, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:50.355625, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:50.355715, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:33:50.355789, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:33:50.355861, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.355904, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18625 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:33:50.356561, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0020] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:33:50.357256, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:50.812658, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:50.812794, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:50.812858, 3] smbd/process.c:1661(process_smb) > Transaction 292 of length 112 (0 toread) >[2011/12/15 11:33:50.812919, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.812955, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18689 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:33:50.813675, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:33:50.813951, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:50.814077, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:50.814175, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:50.814276, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:50.814367, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:50.814539, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:50.814619, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:50.814681, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:50.814744, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:33:50.814807, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:50.814867, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:50.814930, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:50.814990, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:50.815063, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:50.815125, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:33:50.815197, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:50.815274, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219fc2a0 now at offset -1 >[2011/12/15 11:33:50.815342, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:50.815404, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:50.815466, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:50.815547, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:50.815651, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:50.815717, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:50.815786, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:50.815848, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:50.815913, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:50.815975, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:50.816045, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:33:50.816107, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:33:50.816168, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:50.816205, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18689 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:33:50.816780, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0020] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:33:50.817253, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:51.372027, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 86 >[2011/12/15 11:33:51.372174, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x56 >[2011/12/15 11:33:51.372238, 3] smbd/process.c:1661(process_smb) > Transaction 293 of length 90 (0 toread) >[2011/12/15 11:33:51.372299, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.372336, 5] lib/util.c:342(show_msg) > size=86 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18753 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 5632 (0x1600) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=33024 (0x8100) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=3 >[2011/12/15 11:33:51.373219, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:33:51.373298, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.373362, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.373430, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x16, access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = >[2011/12/15 11:33:51.373498, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:33:51.373565, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:33:51.373626, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.373695, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.373756, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.373819, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:51.373888, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.373952, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.374013, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.374102, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:51.374173, 5] smbd/files.c:126(file_new) > allocated file structure 4522, fnum = 8618 (3 used) >[2011/12/15 11:33:51.374242, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:51.374307, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(.) returning 0744 >[2011/12/15 11:33:51.374369, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=., dos_attrs=0x0 access_mask=0x81 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=3 private_flags = 0x0 >[2011/12/15 11:33:51.374436, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.374514, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.374575, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.374636, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:51.374698, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:51.374760, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:51.374822, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=., after mapping access_mask=0x81 >[2011/12/15 11:33:51.374896, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.374975, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10b70 >[2011/12/15 11:33:51.375037, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:2:0 >[2011/12/15 11:33:51.375101, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.375184, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.375252, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10ce0 >[2011/12/15 11:33:51.375313, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:51.375415, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.375481, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.375543, 10] smbd/open.c:714(share_conflict) > share_conflict: entry->access_mask = 0x100081, entry->share_access = 0x7, entry->private_options = 0x0 >[2011/12/15 11:33:51.375605, 10] smbd/open.c:717(share_conflict) > share_conflict: access_mask = 0x81, share_access = 0x3 >[2011/12/15 11:33:51.375665, 10] smbd/open.c:766(share_conflict) > share_conflict: [1] am (0x100081) & right (0x6) = 0x0 >[2011/12/15 11:33:51.375726, 10] smbd/open.c:766(share_conflict) > share_conflict: [1] sa (0x3) & share (0x2) = 0x2 >[2011/12/15 11:33:51.375786, 10] smbd/open.c:768(share_conflict) > share_conflict: [2] am (0x81) & right (0x6) = 0x0 >[2011/12/15 11:33:51.375846, 10] smbd/open.c:768(share_conflict) > share_conflict: [2] sa (0x7) & share (0x2) = 0x2 >[2011/12/15 11:33:51.375906, 10] smbd/open.c:771(share_conflict) > share_conflict: [3] am (0x100081) & right (0x21) = 0x1 >[2011/12/15 11:33:51.375967, 10] smbd/open.c:771(share_conflict) > share_conflict: [3] sa (0x3) & share (0x1) = 0x1 >[2011/12/15 11:33:51.376027, 10] smbd/open.c:773(share_conflict) > share_conflict: [4] am (0x81) & right (0x21) = 0x1 >[2011/12/15 11:33:51.376105, 10] smbd/open.c:773(share_conflict) > share_conflict: [4] sa (0x7) & share (0x1) = 0x1 >[2011/12/15 11:33:51.376166, 10] smbd/open.c:776(share_conflict) > share_conflict: [5] am (0x100081) & right (0x10000) = 0x0 >[2011/12/15 11:33:51.376227, 10] smbd/open.c:776(share_conflict) > share_conflict: [5] sa (0x3) & share (0x4) = 0x0 >[2011/12/15 11:33:51.376287, 10] smbd/open.c:778(share_conflict) > share_conflict: [6] am (0x81) & right (0x10000) = 0x0 >[2011/12/15 11:33:51.376347, 10] smbd/open.c:778(share_conflict) > share_conflict: [6] sa (0x7) & share (0x4) = 0x4 >[2011/12/15 11:33:51.376407, 10] smbd/open.c:780(share_conflict) > share_conflict: No conflict. >[2011/12/15 11:33:51.376467, 10] smbd/open.c:1153(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x0 on file . >[2011/12/15 11:33:51.376528, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x81, open_access_mask = 0x81 >[2011/12/15 11:33:51.376598, 10] smbd/open.c:179(fd_open) > fd_open: name ., flags = 0400000 mode = 0744, fd = 34. >[2011/12/15 11:33:51.376662, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file . = 0 >[2011/12/15 11:33:51.376726, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file . >[2011/12/15 11:33:51.376792, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.376867, 5] smbd/files.c:464(file_free) > freed files structure 8618 (2 used) >[2011/12/15 11:33:51.376930, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory ., access_mask = 0x81, share_access = 0x3 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 >[2011/12/15 11:33:51.376996, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:33:51.377088, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:51.377151, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.377221, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.377348, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:51.377468, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.377708, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:51.377771, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.377832, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.377903, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file . requesting 0x81 returning 0x1 (NT_STATUS_OK) >[2011/12/15 11:33:51.377971, 5] smbd/files.c:126(file_new) > allocated file structure 4523, fnum = 8619 (3 used) >[2011/12/15 11:33:51.378038, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:51.378103, 10] smbd/open.c:179(fd_open) > fd_open: name ., flags = 0600000 mode = 00, fd = 34. >[2011/12/15 11:33:51.378177, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.378263, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a11d50 >[2011/12/15 11:33:51.378324, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:51.378422, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.378495, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.378556, 10] smbd/open.c:714(share_conflict) > share_conflict: entry->access_mask = 0x100081, entry->share_access = 0x7, entry->private_options = 0x0 >[2011/12/15 11:33:51.378619, 10] smbd/open.c:717(share_conflict) > share_conflict: access_mask = 0x81, share_access = 0x3 >[2011/12/15 11:33:51.378679, 10] smbd/open.c:766(share_conflict) > share_conflict: [1] am (0x100081) & right (0x6) = 0x0 >[2011/12/15 11:33:51.378739, 10] smbd/open.c:766(share_conflict) > share_conflict: [1] sa (0x3) & share (0x2) = 0x2 >[2011/12/15 11:33:51.378811, 10] smbd/open.c:768(share_conflict) > share_conflict: [2] am (0x81) & right (0x6) = 0x0 >[2011/12/15 11:33:51.378872, 10] smbd/open.c:768(share_conflict) > share_conflict: [2] sa (0x7) & share (0x2) = 0x2 >[2011/12/15 11:33:51.378933, 10] smbd/open.c:771(share_conflict) > share_conflict: [3] am (0x100081) & right (0x21) = 0x1 >[2011/12/15 11:33:51.378993, 10] smbd/open.c:771(share_conflict) > share_conflict: [3] sa (0x3) & share (0x1) = 0x1 >[2011/12/15 11:33:51.379053, 10] smbd/open.c:773(share_conflict) > share_conflict: [4] am (0x81) & right (0x21) = 0x1 >[2011/12/15 11:33:51.379113, 10] smbd/open.c:773(share_conflict) > share_conflict: [4] sa (0x7) & share (0x1) = 0x1 >[2011/12/15 11:33:51.379174, 10] smbd/open.c:776(share_conflict) > share_conflict: [5] am (0x100081) & right (0x10000) = 0x0 >[2011/12/15 11:33:51.379235, 10] smbd/open.c:776(share_conflict) > share_conflict: [5] sa (0x3) & share (0x4) = 0x0 >[2011/12/15 11:33:51.379295, 10] smbd/open.c:778(share_conflict) > share_conflict: [6] am (0x81) & right (0x10000) = 0x0 >[2011/12/15 11:33:51.379355, 10] smbd/open.c:778(share_conflict) > share_conflict: [6] sa (0x7) & share (0x4) = 0x4 >[2011/12/15 11:33:51.379415, 10] smbd/open.c:780(share_conflict) > share_conflict: No conflict. >[2011/12/15 11:33:51.379477, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 2 >[2011/12/15 11:33:51.379575, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.379652, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x0, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.379736, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.379810, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:51.379870, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:51.379933, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:51.379994, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:51.380056, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:51.380125, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.380240, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.380318, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x0, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.380390, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8619, open name = . >[2011/12/15 11:33:51.382621, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 84 >[2011/12/15 11:33:51.382695, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x54 >[2011/12/15 11:33:51.382755, 3] smbd/process.c:1661(process_smb) > Transaction 294 of length 88 (0 toread) >[2011/12/15 11:33:51.382815, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.382851, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18817 > smt_wct=23 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 4096 (0x1000) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 2 (0x2) > smb_vwv[19]=16484 (0x4064) > smb_vwv[20]= 20 (0x14) > smb_vwv[21]= 8619 (0x21AB) > smb_vwv[22]= 1 (0x1) > smb_bcc=3 >[2011/12/15 11:33:51.383705, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:33:51.383781, 3] smbd/process.c:1466(switch_message) > switch message SMBnttrans (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.383844, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.383905, 10] smbd/nttrans.c:3079(reply_nttrans) > num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=16, param_offset=84, data_offset=0 >[2011/12/15 11:33:51.383970, 10] smbd/nttrans.c:3151(reply_nttrans) > reply_nttrans: state->setup_count = 8 >[2011/12/15 11:33:51.384031, 10] ../lib/util/util.c:415(dump_data) > [0000] 64 40 14 00 AB 21 01 00 d@...!.. >[2011/12/15 11:33:51.384110, 10] smbd/nttrans.c:2143(call_nt_transact_ioctl) > call_nt_transact_ioctl: function[0x00144064] FID[0x21AB] isFSctl[0x01] compfilter[0x00] >[2011/12/15 11:33:51.384174, 5] smbd/nttrans.c:2278(call_nt_transact_ioctl) > FSCTL_GET_SHADOW_COPY_DATA: connectpath /mnt/public, not supported. >[2011/12/15 11:33:51.384237, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/nttrans.c(2279) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED >[2011/12/15 11:33:51.384302, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.384338, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa0 > smb_rcls=187 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18817 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:51.384653, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:51.386524, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:51.386596, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:51.386656, 3] smbd/process.c:1661(process_smb) > Transaction 295 of length 45 (0 toread) >[2011/12/15 11:33:51.386717, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.386752, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18881 > smt_wct=3 > smb_vwv[ 0]= 8619 (0x21AB) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:51.387156, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:51.387194, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.387257, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.387317, 3] smbd/reply.c:4841(reply_close) > close directory fnum=8619 >[2011/12/15 11:33:51.387387, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.387455, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10830 >[2011/12/15 11:33:51.387516, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.387613, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.387689, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x0, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.387754, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.387816, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 2 >[2011/12/15 11:33:51.387911, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.387987, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[1]: UNUSED pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x40, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.388055, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.388131, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file . = 0 >[2011/12/15 11:33:51.388195, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file . >[2011/12/15 11:33:51.388259, 5] smbd/files.c:464(file_free) > freed files structure 8619 (2 used) >[2011/12/15 11:33:51.388322, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.388359, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=18881 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:51.388674, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:51.393002, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 88 >[2011/12/15 11:33:51.393074, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x58 >[2011/12/15 11:33:51.393134, 3] smbd/process.c:1661(process_smb) > Transaction 296 of length 92 (0 toread) >[2011/12/15 11:33:51.393194, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.393230, 5] lib/util.c:342(show_msg) > size=88 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=18945 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 512 (0x200) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=32768 (0x8000) > smb_vwv[ 8]= 4096 (0x1000) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]=32768 (0x8000) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 768 (0x300) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 768 (0x300) > smb_bcc=5 >[2011/12/15 11:33:51.394135, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 00 00 .\... >[2011/12/15 11:33:51.394213, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.394276, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.394339, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = >[2011/12/15 11:33:51.394406, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "" >[2011/12/15 11:33:51.394479, 5] smbd/filename.c:291(unix_convert) > conversion finished "" -> . >[2011/12/15 11:33:51.394539, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.394605, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.394666, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.394728, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:51.394796, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.394860, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.394920, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.394981, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = . >[2011/12/15 11:33:51.395051, 5] smbd/files.c:126(file_new) > allocated file structure 4524, fnum = 8620 (3 used) >[2011/12/15 11:33:51.395118, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:51.395181, 3] smbd/dosmode.c:159(unix_mode) > unix_mode(.) returning 0744 >[2011/12/15 11:33:51.395243, 10] smbd/open.c:1595(open_file_ntcreate) > open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0744 oplock_request=0 private_flags = 0x0 >[2011/12/15 11:33:51.395309, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:51.395373, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:51.395433, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:51.395494, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:51.395555, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:51.395616, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:51.395678, 10] smbd/open.c:1773(open_file_ntcreate) > open_file_ntcreate: fname=., after mapping access_mask=0x100080 >[2011/12/15 11:33:51.395750, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.395835, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10b70 >[2011/12/15 11:33:51.395898, 10] locking/brlock.c:1814(brl_get_locks_internal) > brl_get_locks_internal: 0 current locks on file_id 700:2:0 >[2011/12/15 11:33:51.395961, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.396043, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.396109, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10ce0 >[2011/12/15 11:33:51.396170, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.396267, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.396344, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: UNUSED pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x40, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.396409, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.396470, 10] smbd/open.c:1115(grant_fsp_oplock_type) > grant_fsp_oplock_type: oplock type 0x0 on file . >[2011/12/15 11:33:51.396531, 4] smbd/open.c:2064(open_file_ntcreate) > calling open_file with flags=0x0 flags2=0x0 mode=0744, access_mask = 0x100080, open_access_mask = 0x100080 >[2011/12/15 11:33:51.396595, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:33:51.396677, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:51.396738, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.396807, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.396924, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:51.397036, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.397272, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:51.397335, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.397396, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.397468, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2011/12/15 11:33:51.397534, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.397610, 5] smbd/files.c:464(file_free) > freed files structure 8620 (2 used) >[2011/12/15 11:33:51.397672, 5] smbd/open.c:2592(open_directory) > open_directory: opening directory ., access_mask = 0x100080, share_access = 0x3 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x90 >[2011/12/15 11:33:51.397755, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:33:51.397837, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:51.397899, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.397967, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.398079, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:51.398188, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:51.398422, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:51.398494, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.398555, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:51.398623, 10] smbd/open.c:122(smbd_check_open_rights) > smbd_check_open_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2011/12/15 11:33:51.398690, 5] smbd/files.c:126(file_new) > allocated file structure 4525, fnum = 8621 (3 used) >[2011/12/15 11:33:51.398757, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/. hash 0x7d1a2559 >[2011/12/15 11:33:51.398823, 10] smbd/open.c:179(fd_open) > fd_open: name ., flags = 0600000 mode = 00, fd = 34. >[2011/12/15 11:33:51.398897, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.398965, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x219f60b0 >[2011/12/15 11:33:51.399025, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.399124, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.399201, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: UNUSED pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x4941, type= 0x40, gen_id = 71, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.399265, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.399328, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 2 >[2011/12/15 11:33:51.399425, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.399502, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x100080, mid = 0x4a01, type= 0x0, gen_id = 73, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.399587, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.399663, 10] smbd/open.c:3408(create_file_unixpath) > create_file_unixpath: info=1 >[2011/12/15 11:33:51.399724, 10] smbd/open.c:3691(create_file_default) > create_file: info=1 >[2011/12/15 11:33:51.399786, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: . >[2011/12/15 11:33:51.399848, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning d >[2011/12/15 11:33:51.399910, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning d >[2011/12/15 11:33:51.399979, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.400076, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.400154, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x100080, mid = 0x4a01, type= 0x0, gen_id = 73, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.400223, 5] smbd/nttrans.c:730(reply_ntcreate_and_X) > reply_ntcreate_and_X: fnum = 8621, open name = . >[2011/12/15 11:33:51.403640, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 84 >[2011/12/15 11:33:51.403713, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x54 >[2011/12/15 11:33:51.403773, 3] smbd/process.c:1661(process_smb) > Transaction 297 of length 88 (0 toread) >[2011/12/15 11:33:51.403833, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.403869, 5] lib/util.c:342(show_msg) > size=84 > smb_com=0xa0 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19009 > smt_wct=23 > smb_vwv[ 0]= 4 (0x4) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 64 (0x40) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]=21504 (0x5400) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 1024 (0x400) > smb_vwv[18]= 2 (0x2) > smb_vwv[19]= 168 (0xA8) > smb_vwv[20]= 9 (0x9) > smb_vwv[21]= 8621 (0x21AD) > smb_vwv[22]= 1 (0x1) > smb_bcc=3 >[2011/12/15 11:33:51.404721, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 ... >[2011/12/15 11:33:51.404796, 3] smbd/process.c:1466(switch_message) > switch message SMBnttrans (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.404859, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.404919, 10] smbd/nttrans.c:3079(reply_nttrans) > num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=16384, param_offset=84, data_offset=0 >[2011/12/15 11:33:51.404984, 10] smbd/nttrans.c:3151(reply_nttrans) > reply_nttrans: state->setup_count = 8 >[2011/12/15 11:33:51.405044, 10] ../lib/util/util.c:415(dump_data) > [0000] A8 00 09 00 AD 21 01 00 .....!.. >[2011/12/15 11:33:51.405122, 10] smbd/nttrans.c:2143(call_nt_transact_ioctl) > call_nt_transact_ioctl: function[0x000900A8] FID[0x21AD] isFSctl[0x01] compfilter[0x00] >[2011/12/15 11:33:51.405183, 10] smbd/nttrans.c:2217(call_nt_transact_ioctl) > FSCTL_GET_REPARSE_POINT: called on FID[0x21AD](but not implemented) >[2011/12/15 11:33:51.405245, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/nttrans.c(2218) cmd=160 (SMBnttrans) NT_STATUS_NOT_A_REPARSE_POINT >[2011/12/15 11:33:51.405328, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.405365, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa0 > smb_rcls=117 > smb_reh=2 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19009 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:51.405685, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:51.407527, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:51.407598, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:51.407658, 3] smbd/process.c:1661(process_smb) > Transaction 298 of length 45 (0 toread) >[2011/12/15 11:33:51.407718, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.407754, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=19073 > smt_wct=3 > smb_vwv[ 0]= 8621 (0x21AD) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:51.408139, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:51.408176, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:51.408239, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:51.408299, 3] smbd/reply.c:4841(reply_close) > close directory fnum=8621 >[2011/12/15 11:33:51.408369, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000200 >[2011/12/15 11:33:51.408436, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a10830 >[2011/12/15 11:33:51.408496, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 2 >[2011/12/15 11:33:51.408593, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.408670, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[1]: pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x100080, mid = 0x4a01, type= 0x0, gen_id = 73, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.408734, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.408797, 10] locking/locking.c:806(unparse_share_modes) > unparse_share_modes: owrt: Thu Dec 15 11:01:17 AM 2011 MSK cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num: 2 >[2011/12/15 11:33:51.408892, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x100081, mid = 0xec0, type= 0x0, gen_id = 11, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.408967, 10] locking/locking.c:535(print_share_mode_table) > print_share_mode_table: share_mode_entry[1]: UNUSED pid = 29630, share_access = 0x3, private_options = 0x0, access_mask = 0x100080, mid = 0x4a01, type= 0x40, gen_id = 73, uid = 65534, flags = 0, file_id 700:2:0, name_hash = 0x7d1a2559 >[2011/12/15 11:33:51.409035, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000200 >[2011/12/15 11:33:51.409110, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file . = 0 >[2011/12/15 11:33:51.409174, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file . >[2011/12/15 11:33:51.409239, 5] smbd/files.c:464(file_free) > freed files structure 8621 (2 used) >[2011/12/15 11:33:51.409302, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:51.409339, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=19073 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:51.409679, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:56.614279, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 70 >[2011/12/15 11:33:56.614415, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x46 >[2011/12/15 11:33:56.614493, 3] smbd/process.c:1661(process_smb) > Transaction 299 of length 74 (0 toread) >[2011/12/15 11:33:56.614555, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.614591, 5] lib/util.c:342(show_msg) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19137 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2011/12/15 11:33:56.615362, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 05 01 ..... >[2011/12/15 11:33:56.615481, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.615559, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:56.615637, 3] smbd/trans2.c:3512(call_trans2qfsinfo) > call_trans2qfsinfo: level = 261 >[2011/12/15 11:33:56.615720, 3] smbd/trans2.c:2950(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 261 >[2011/12/15 11:33:56.615817, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 16584 >[2011/12/15 11:33:56.615893, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2011/12/15 11:33:56.615967, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.616011, 5] lib/util.c:342(show_msg) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19137 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2011/12/15 11:33:56.616669, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 2F 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 ./...... .....N.T > [0010] 00 46 00 53 00 .F.S. >[2011/12/15 11:33:56.616888, 4] smbd/trans2.c:3528(call_trans2qfsinfo) > SMBtrans2 info_level = 261 >[2011/12/15 11:33:56.616983, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:56.617058, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:56.617129, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:56.617258, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:56.619675, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:56.619830, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:56.619903, 3] smbd/process.c:1661(process_smb) > Transaction 300 of length 112 (0 toread) >[2011/12/15 11:33:56.619974, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.620016, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19201 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:33:56.620855, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:33:56.621118, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.621201, 10] smbd/share_access.c:241(user_ok_token) > user_ok_token: share public is ok for unix user nobody >[2011/12/15 11:33:56.621280, 10] smbd/share_access.c:286(is_share_read_only_for_token) > is_share_read_only_for_user: share public is read-write for unix user nobody >[2011/12/15 11:33:56.621383, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:56.621480, 10] ../libcli/security/access_check.c:58(se_map_generic) > se_map_generic(): mapped mask 0x10000000 to 0x001f01ff >[2011/12/15 11:33:56.621563, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:56.621641, 5] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-65534 > SID[ 1]: S-1-22-2-65534 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2011/12/15 11:33:56.621929, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2011/12/15 11:33:56.622085, 5] smbd/uid.c:317(change_to_user_internal) > Impersonated user: uid=(0,65534), gid=(0,65534) >[2011/12/15 11:33:56.622175, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:56.622265, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:56.622348, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:56.622430, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:56.622549, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:56.622623, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:56.622697, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:33:56.622772, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:56.622844, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:56.622921, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:56.622993, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:56.623084, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:56.623158, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:33:56.623231, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:56.623325, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219ed2c8 now at offset -1 >[2011/12/15 11:33:56.623408, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:56.623483, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:56.623590, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:56.623687, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:56.623817, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:56.623896, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:56.623983, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:56.624057, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:56.624138, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:56.624212, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:56.624301, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:33:56.624376, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:33:56.624449, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.624492, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19201 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:33:56.625151, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0020] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:33:56.625851, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:56.630225, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 70 >[2011/12/15 11:33:56.630381, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x46 >[2011/12/15 11:33:56.630482, 3] smbd/process.c:1661(process_smb) > Transaction 301 of length 74 (0 toread) >[2011/12/15 11:33:56.630555, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.630598, 5] lib/util.c:342(show_msg) > size=70 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19265 > smt_wct=15 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 560 (0x230) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 2 (0x2) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 3 (0x3) > smb_bcc=5 >[2011/12/15 11:33:56.631395, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 05 01 ..... >[2011/12/15 11:33:56.631553, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.631632, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:56.631710, 3] smbd/trans2.c:3512(call_trans2qfsinfo) > call_trans2qfsinfo: level = 261 >[2011/12/15 11:33:56.631793, 3] smbd/trans2.c:2950(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 261 >[2011/12/15 11:33:56.631889, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 16584 >[2011/12/15 11:33:56.631963, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 >[2011/12/15 11:33:56.632036, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.632079, 5] lib/util.c:342(show_msg) > size=76 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19265 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 20 (0x14) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 20 (0x14) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=21 >[2011/12/15 11:33:56.632736, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 2F 00 01 00 FF 00 00 00 08 00 00 00 4E 00 54 ./...... .....N.T > [0010] 00 46 00 53 00 .F.S. >[2011/12/15 11:33:56.632956, 4] smbd/trans2.c:3528(call_trans2qfsinfo) > SMBtrans2 info_level = 261 >[2011/12/15 11:33:56.635297, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 41 >[2011/12/15 11:33:56.635450, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x29 >[2011/12/15 11:33:56.635524, 3] smbd/process.c:1661(process_smb) > Transaction 302 of length 45 (0 toread) >[2011/12/15 11:33:56.635596, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.635639, 5] lib/util.c:342(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=19329 > smt_wct=3 > smb_vwv[ 0]= 8617 (0x21A9) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 >[2011/12/15 11:33:56.636100, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:56.636162, 3] smbd/process.c:1466(switch_message) > switch message SMBclose (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.636238, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:56.636313, 3] smbd/reply.c:4851(reply_close) > close fd=33 fnum=8617 (numopen=2) >[2011/12/15 11:33:56.636386, 6] smbd/close.c:527(set_close_write_time) > close_write_time: Thu Jan 1 02:59:59 1970 >[2011/12/15 11:33:56.636477, 10] smbd/oplock_linux.c:141(linux_release_kernel_oplock) > linux_release_kernel_oplock: file test_img.bmp, file_id = 700:c:0 gen_id = 69 has kernel oplock state of 1. >[2011/12/15 11:33:56.636590, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key 00070000000000000C00 >[2011/12/15 11:33:56.636680, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a108b0 >[2011/12/15 11:33:56.636752, 10] locking/locking.c:666(parse_share_modes) > parse_share_modes: owrt: Thu Dec 15 11:00:24 AM 2011 MSK, cwrt: Thu Jan 1 03:00:00 AM 1970 MSK, ntok: 0, num_share_modes: 1 >[2011/12/15 11:33:56.636877, 10] locking/locking.c:728(parse_share_modes) > parse_share_modes: share_mode_entry[0]: pid = 29630, share_access = 0x7, private_options = 0x0, access_mask = 0x20089, mid = 0x3b01, type= 0x3, gen_id = 69, uid = 65534, flags = 0, file_id 700:c:0, name_hash = 0x277862db >[2011/12/15 11:33:56.636958, 10] locking/locking.c:1618(get_delete_on_close_token) > get_delete_on_close_token: name_hash = 0x277862db >[2011/12/15 11:33:56.637039, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key 00070000000000000C00 >[2011/12/15 11:33:56.637140, 10] locking/posix.c:516(get_windows_lock_ref_count) > get_windows_lock_count for file test_img.bmp = 0 >[2011/12/15 11:33:56.637249, 10] locking/posix.c:542(delete_windows_lock_ref_count) > delete_windows_lock_ref_count for file test_img.bmp >[2011/12/15 11:33:56.637336, 2] smbd/close.c:691(close_normal_file) > nobody closed file test_img.bmp (numopen=1) NT_STATUS_OK >[2011/12/15 11:33:56.637413, 5] smbd/files.c:464(file_free) > freed files structure 8617 (1 used) >[2011/12/15 11:33:56.637495, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.637538, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=65279 > smb_uid=0 > smb_mid=19329 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:56.637914, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:56.640249, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 112 >[2011/12/15 11:33:56.640402, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x70 >[2011/12/15 11:33:56.640476, 3] smbd/process.c:1661(process_smb) > Transaction 303 of length 116 (0 toread) >[2011/12/15 11:33:56.640548, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.640591, 5] lib/util.c:342(show_msg) > size=112 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19393 > smt_wct=24 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]=57054 (0xDEDE) > smb_vwv[ 2]= 6656 (0x1A00) > smb_vwv[ 3]= 4096 (0x1000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]=32768 (0x8000) > smb_vwv[ 8]= 4352 (0x1100) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 1792 (0x700) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 256 (0x100) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]= 512 (0x200) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_bcc=29 >[2011/12/15 11:33:56.641636, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 5C 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D .\.t.e.s .t._.i.m > [0010] 00 67 00 2E 00 62 00 6D 00 70 00 00 00 .g...b.m .p... >[2011/12/15 11:33:56.641836, 3] smbd/process.c:1466(switch_message) > switch message SMBntcreateX (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.641913, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:56.641995, 10] smbd/nttrans.c:505(reply_ntcreate_and_X) > reply_ntcreate_and_X: flags = 0x10, access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = test_img.bmp >[2011/12/15 11:33:56.642078, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:56.642159, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:56.642242, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:56.642331, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:56.642404, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:56.642503, 10] smbd/open.c:3596(create_file_default) > create_file: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:56.642589, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:56.642672, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:56.642744, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:56.642854, 10] smbd/open.c:3116(create_file_unixpath) > create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = test_img.bmp >[2011/12/15 11:33:56.642937, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file . >[2011/12/15 11:33:56.643031, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:56.643094, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:56.643165, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >[2011/12/15 11:33:56.643296, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:56.643412, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x >[2011/12/15 11:33:56.643650, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff >[2011/12/15 11:33:56.643714, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:56.643775, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9 >[2011/12/15 11:33:56.643845, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file . access_mask 0x40, access_granted 0x40 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:56.643915, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001f01ff (2032127) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x001200a9 (1179817) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:56.646057, 10] smbd/posix_acls.c:3412(posix_get_nt_acl) > posix_get_nt_acl: called for file test_img.bmp >[2011/12/15 11:33:56.646138, 10] smbd/posix_acls.c:2537(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : >[2011/12/15 11:33:56.646200, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:33:56.646268, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- >[2011/12/15 11:33:56.646381, 10] smbd/posix_acls.c:2550(canonicalise_acl) > canon_ace index 2. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >[2011/12/15 11:33:56.646502, 10] smbd/posix_acls.c:848(print_canon_ace_list) > print_canon_ace_list: canonicalise_acl: ace entries after arrange > canon_ace index 0. Type = allow SID = S-1-5-21-251563815-16092371-1107951384-501 uid 65534 (nobody) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-65534 gid 65534 (nogroup) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-- > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- >[2011/12/15 11:33:56.646756, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1e01ff >[2011/12/15 11:33:56.646819, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:33:56.646880, 10] smbd/posix_acls.c:1124(map_canon_ace_perms) > map_canon_ace_perms: Mapped (UNIX) 100 to (NT) 120089 >[2011/12/15 11:33:56.646947, 10] smbd/file_access.c:70(can_access_file_acl) > can_access_file_acl for file test_img.bmp access_mask 0x10000, access_granted 0x10000 access DENIED; status: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:56.647013, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) > secdesc: struct security_descriptor > revision : SECURITY_DESCRIPTOR_REVISION_1 (1) > type : 0x9004 (36868) > 0: SEC_DESC_OWNER_DEFAULTED > 0: SEC_DESC_GROUP_DEFAULTED > 1: SEC_DESC_DACL_PRESENT > 0: SEC_DESC_DACL_DEFAULTED > 0: SEC_DESC_SACL_PRESENT > 0: SEC_DESC_SACL_DEFAULTED > 0: SEC_DESC_DACL_TRUSTED > 0: SEC_DESC_SERVER_SECURITY > 0: SEC_DESC_DACL_AUTO_INHERIT_REQ > 0: SEC_DESC_SACL_AUTO_INHERIT_REQ > 0: SEC_DESC_DACL_AUTO_INHERITED > 0: SEC_DESC_SACL_AUTO_INHERITED > 1: SEC_DESC_DACL_PROTECTED > 0: SEC_DESC_SACL_PROTECTED > 0: SEC_DESC_RM_CONTROL_VALID > 1: SEC_DESC_SELF_RELATIVE > owner_sid : * > owner_sid : S-1-5-21-251563815-16092371-1107951384-501 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x0058 (88) > num_aces : 0x00000003 (3) > aces: ARRAY(3) > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0024 (36) > access_mask : 0x001e01ff (1966591) > object : union security_ace_object_ctr(case 0) > trustee : S-1-5-21-251563815-16092371-1107951384-501 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0018 (24) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-22-2-65534 > aces: struct security_ace > type : SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x00 (0) > 0: SEC_ACE_FLAG_OBJECT_INHERIT > 0: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x00: SEC_ACE_FLAG_VALID_INHERIT (0) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > 0: SEC_ACE_FLAG_FAILED_ACCESS > size : 0x0014 (20) > access_mask : 0x00120089 (1179785) > object : union security_ace_object_ctr(case 0) > trustee : S-1-1-0 >[2011/12/15 11:33:56.649134, 10] smbd/open.c:3162(create_file_unixpath) > create_file_unixpath: open file test_img.bmp for delete ACCESS_DENIED >[2011/12/15 11:33:56.649196, 10] smbd/open.c:3420(create_file_unixpath) > create_file_unixpath: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:56.649256, 10] smbd/open.c:3700(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:56.649320, 3] smbd/error.c:81(error_packet_set) > error packet at smbd/error.c(161) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED >[2011/12/15 11:33:56.649383, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.649419, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0xa2 > smb_rcls=34 > smb_reh=0 > smb_err=49152 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19393 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:56.649740, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:56.652378, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 102 >[2011/12/15 11:33:56.652450, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x66 >[2011/12/15 11:33:56.652511, 3] smbd/process.c:1661(process_smb) > Transaction 304 of length 106 (0 toread) >[2011/12/15 11:33:56.652571, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.652607, 5] lib/util.c:342(show_msg) > size=102 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19457 > smt_wct=15 > smb_vwv[ 0]= 34 (0x22) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 2 (0x2) > smb_vwv[ 3]= 40 (0x28) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 34 (0x22) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 5 (0x5) > smb_bcc=37 >[2011/12/15 11:33:56.653272, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 EC 03 00 00 00 00 5C 00 74 00 65 00 73 ........ .\.t.e.s > [0010] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0020] 00 70 00 00 00 .p... >[2011/12/15 11:33:56.653440, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:56.653509, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:56.653573, 3] smbd/trans2.c:5116(call_trans2qfilepathinfo) > call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 >[2011/12/15 11:33:56.653642, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:56.653706, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:56.653773, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:56.653860, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:56.653922, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:56.653992, 10] smbd/files.c:618(file_name_hash) > file_name_hash: /mnt/public/test_img.bmp hash 0x277862db >[2011/12/15 11:33:56.654069, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:56.654130, 3] smbd/trans2.c:5253(call_trans2qfilepathinfo) > call_trans2qfilepathinfo test_img.bmp (fnum = -1) level=1004 call=5 total_data=0 >[2011/12/15 11:33:56.654194, 5] smbd/trans2.c:4228(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: test_img.bmp (fnum = -1) level=1004 max_data=40 >[2011/12/15 11:33:56.654256, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: test_img.bmp >[2011/12/15 11:33:56.654318, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:56.654380, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:56.654458, 10] smbd/trans2.c:4457(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB_FILE_BASIC_INFORMATION >[2011/12/15 11:33:56.654520, 5] smbd/trans2.c:4467(smbd_do_qfilepathinfo) > SMB_QFBI - create: Thu Dec 15 11:00:24 2011 > access: Thu Dec 15 11:01:18 2011 > write: Thu Dec 15 11:00:24 2011 > change: Thu Dec 15 11:00:24 2011 > mode: 20 >[2011/12/15 11:33:56.654724, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 16582 >[2011/12/15 11:33:56.654786, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 >[2011/12/15 11:33:56.654847, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:56.654883, 5] lib/util.c:342(show_msg) > size=100 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19457 > smt_wct=10 > smb_vwv[ 0]= 2 (0x2) > smb_vwv[ 1]= 40 (0x28) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 2 (0x2) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 40 (0x28) > smb_vwv[ 7]= 60 (0x3C) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=45 >[2011/12/15 11:33:56.655435, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0010] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0020] 37 F7 BA CC 01 20 00 00 00 00 00 00 00 7.... .. ..... >[2011/12/15 11:33:57.761460, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 108 >[2011/12/15 11:33:57.761608, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x6c >[2011/12/15 11:33:57.761673, 3] smbd/process.c:1661(process_smb) > Transaction 305 of length 112 (0 toread) >[2011/12/15 11:33:57.761734, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:57.761770, 5] lib/util.c:342(show_msg) > size=108 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19521 > smt_wct=15 > smb_vwv[ 0]= 40 (0x28) > smb_vwv[ 1]= 0 (0x0) > smb_vwv[ 2]= 10 (0xA) > smb_vwv[ 3]=16384 (0x4000) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 40 (0x28) > smb_vwv[10]= 68 (0x44) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 1 (0x1) > smb_vwv[14]= 1 (0x1) > smb_bcc=43 >[2011/12/15 11:33:57.762436, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 00 00 16 00 56 05 07 00 04 01 00 00 00 00 5C .....V.. .......\ > [0010] 00 74 00 65 00 73 00 74 00 5F 00 69 00 6D 00 67 .t.e.s.t ._.i.m.g > [0020] 00 2E 00 62 00 6D 00 70 00 00 00 ...b.m.p ... >[2011/12/15 11:33:57.762627, 3] smbd/process.c:1466(switch_message) > switch message SMBtrans2 (pid 29630) conn 0x219fa230 >[2011/12/15 11:33:57.762715, 4] smbd/uid.c:345(change_to_user) > Skipping user change - already user >[2011/12/15 11:33:57.762786, 3] smbd/trans2.c:2291(call_trans2findfirst) > call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 >[2011/12/15 11:33:57.762861, 5] smbd/filename.c:257(unix_convert) > unix_convert called on file "test_img.bmp" >[2011/12/15 11:33:57.762929, 10] smbd/statcache.c:280(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [TEST_IMG.BMP] -> [test_img.bmp] >[2011/12/15 11:33:57.762999, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [test_img.bmp] [/mnt/public] >[2011/12/15 11:33:57.763072, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [test_img.bmp] -> [/mnt/public/test_img.bmp] >[2011/12/15 11:33:57.763133, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: test_img.bmp reduced to /mnt/public/test_img.bmp >[2011/12/15 11:33:57.763195, 5] smbd/trans2.c:2376(call_trans2findfirst) > dir=., mask = test_img.bmp >[2011/12/15 11:33:57.763257, 5] smbd/dir.c:435(dptr_create) > dptr_create dir=. >[2011/12/15 11:33:57.763317, 3] smbd/vfs.c:905(check_reduced_name) > check_reduced_name [.] [/mnt/public] >[2011/12/15 11:33:57.763380, 10] smbd/vfs.c:969(check_reduced_name) > check_reduced_name realpath [.] -> [/mnt/public] >[2011/12/15 11:33:57.763441, 3] smbd/vfs.c:1039(check_reduced_name) > check_reduced_name: . reduced to /mnt/public >[2011/12/15 11:33:57.763514, 3] smbd/dir.c:560(dptr_create) > creating new dirptr 256 for path ., expect_close = 1 >[2011/12/15 11:33:57.763576, 4] smbd/trans2.c:2444(call_trans2findfirst) > dptr_num is 256, wcard = test_img.bmp, attr = 22 >[2011/12/15 11:33:57.763636, 8] smbd/trans2.c:2453(call_trans2findfirst) > dirpath=<.> dontdescend=<> >[2011/12/15 11:33:57.763713, 6] smbd/dir.c:951(smbd_dirptr_get_entry) > smbd_dirptr_get_entry: dirptr 0x219edb08 now at offset -1 >[2011/12/15 11:33:57.763781, 8] smbd/dosmode.c:621(dos_mode) > dos_mode: ./test_img.bmp >[2011/12/15 11:33:57.763843, 8] smbd/dosmode.c:199(dos_mode_from_sbuf) > dos_mode_from_sbuf returning a >[2011/12/15 11:33:57.763905, 8] smbd/dosmode.c:672(dos_mode) > dos_mode returning a >[2011/12/15 11:33:57.763983, 10] locking/locking.c:1017(fetch_share_mode_unlocked) > fetch_share_mode_unlocked: no share_mode record around (file not open) >[2011/12/15 11:33:57.764044, 3] smbd/dir.c:1023(smbd_dirptr_get_entry) > smbd_dirptr_get_entry mask=[test_img.bmp] found ./test_img.bmp fname=test_img.bmp (test_img.bmp) >[2011/12/15 11:33:57.764114, 10] smbd/trans2.c:1578(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: space_remaining = 16384 >[2011/12/15 11:33:57.764175, 10] smbd/trans2.c:1727(smbd_marshall_dir_entry) > smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO >[2011/12/15 11:33:57.764240, 5] smbd/trans2.c:2510(call_trans2findfirst) > call_trans2findfirst - (2) closing dptr_num 256 >[2011/12/15 11:33:57.764302, 4] smbd/dir.c:257(dptr_close_internal) > closing dptr key 256 >[2011/12/15 11:33:57.764372, 9] smbd/trans2.c:941(send_trans2_replies) > t2_rep: params_sent_thistime = 10, data_sent_thistime = 120, useable_space = 16582 >[2011/12/15 11:33:57.764434, 9] smbd/trans2.c:943(send_trans2_replies) > t2_rep: params_to_send = 10, data_to_send = 120, paramsize = 10, datasize = 120 >[2011/12/15 11:33:57.764495, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:57.764531, 5] lib/util.c:342(show_msg) > size=188 > smb_com=0x32 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=2 > smb_pid=460 > smb_uid=0 > smb_mid=19521 > smt_wct=10 > smb_vwv[ 0]= 10 (0xA) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 10 (0xA) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 120 (0x78) > smb_vwv[ 7]= 68 (0x44) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=133 >[2011/12/15 11:33:57.765082, 10] ../lib/util/util.c:415(dump_data) > [0000] 00 FD FF 01 00 01 00 00 00 00 00 00 00 78 00 00 ........ .....x.. > [0010] 00 00 00 00 00 00 B4 A2 37 F7 BA CC 01 00 73 D2 ........ 7.....s. > [0020] 57 F7 BA CC 01 00 B4 A2 37 F7 BA CC 01 00 B4 A2 W....... 7....... > [0030] 37 F7 BA CC 01 AA 5B 03 00 00 00 00 00 00 00 10 7.....[. ........ > [0040] 00 00 00 00 00 20 00 00 00 18 00 00 00 00 00 00 ..... .. ........ > [0050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0060] 00 00 00 00 00 00 00 00 00 00 00 74 00 65 00 73 ........ ...t.e.s > [0070] 00 74 00 5F 00 69 00 6D 00 67 00 2E 00 62 00 6D .t._.i.m .g...b.m > [0080] 00 70 00 00 00 .p... >[2011/12/15 11:33:57.765565, 4] smbd/trans2.c:2554(call_trans2findfirst) > SMBtrans2 mask=test_img.bmp directory=. dirtype=22 numentries=1 >[2011/12/15 11:33:58.745622, 10] lib/util_sock.c:516(read_smb_length_return_keepalive) > got smb length of 35 >[2011/12/15 11:33:58.745771, 6] smbd/process.c:1659(process_smb) > got message type 0x0 of len 0x23 >[2011/12/15 11:33:58.745835, 3] smbd/process.c:1661(process_smb) > Transaction 306 of length 39 (0 toread) >[2011/12/15 11:33:58.745896, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:58.745932, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=19585 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:58.746248, 10] ../lib/util/util.c:415(dump_data) >[2011/12/15 11:33:58.746289, 3] smbd/process.c:1466(switch_message) > switch message SMBtdis (pid 29630) conn 0x219f98a8 >[2011/12/15 11:33:58.746353, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:58.746413, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:58.746486, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:58.746593, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:58.746660, 4] smbd/vfs.c:780(vfs_ChDir) > vfs_ChDir to /tmp >[2011/12/15 11:33:58.746732, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:58.746792, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:58.746852, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:58.746944, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:58.747007, 3] smbd/service.c:1291(close_cnum) > 81.95.129.43 (81.95.129.43) closed connection to service IPC$ >[2011/12/15 11:33:58.747077, 3] smbd/connection.c:35(yield_connection) > Yielding connection to IPC$ >[2011/12/15 11:33:58.747217, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked) > Locking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:58.747295, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked) > Allocated locked data 0x0x21a0e7e8 >[2011/12/15 11:33:58.747374, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr) > Unlocking key BE730000FFFFFFFFF9A4 >[2011/12/15 11:33:58.747514, 4] smbd/vfs.c:780(vfs_ChDir) > vfs_ChDir to / >[2011/12/15 11:33:58.747580, 4] smbd/sec_ctx.c:314(set_sec_ctx) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2011/12/15 11:33:58.747640, 5] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2011/12/15 11:33:58.747700, 5] auth/token_util.c:527(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2011/12/15 11:33:58.747792, 5] smbd/uid.c:400(change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2011/12/15 11:33:58.747865, 5] lib/util.c:332(show_msg) >[2011/12/15 11:33:58.747903, 5] lib/util.c:342(show_msg) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=49155 > smb_tid=1 > smb_pid=65279 > smb_uid=0 > smb_mid=19585 > smt_wct=0 > smb_bcc=0 >[2011/12/15 11:33:58.748246, 10] ../lib/util/util.c:415(dump_data)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 8414
:
6821
|
6829
|
7089
|
7185
|
7186
| 7187 |
7188
|
7189
|
7278
|
7279
|
7597
|
7665
|
7666