[2012/01/06 19:12:30, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:30, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:30, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:30, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:30, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:30, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:30, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC388' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:30, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:30, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:30, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:30, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC388 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:30, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:30, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873547) - last(1325873431) < 900 [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet 192.168.2.1: netmask= 255.255.255.0: QWHO.NET(1) current master browser = SERVERBB SERVERBB 408c9b2b (SERVERBB) XPDATEV-PRO 40011007 () [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 192.168.2.1: QWHO.NET(1) current master browser = UNKNOWN SERVERBB 40899b2b (SERVERBB) [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:30, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:30, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:30, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:30, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC388' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:30, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:30, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:30, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:30, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC388 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:30, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:30, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:30, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873550) - last(1325873431) < 900 [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:30, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:34, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC198' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:34, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC198 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873550) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC198' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:34, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC198 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 8] lib/util.c:1521(is_myname) is_myname("SERVERBB") returns 1 [2012/01/06 19:12:34, 3] nmbd/nmbd_sendannounce.c:167(send_local_master_announcement) send_local_master_announcement: type 8c9b2b for name SERVERBB on subnet 192.168.2.1 for workgroup QWHO.NET [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\BROWSE from SERVERBB<00> IP 192.168.2.1 to QWHO.NET<1e> IP 192.168.2.255 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char .. ...SERVERBB.. hex 0f 04 20 bf 02 00 53 45 52 56 45 52 42 42 00 00 10 char ........+.....U. hex 00 00 00 00 00 00 04 09 2b 9b 8c 00 0f 01 55 aa 20 char SERVERBB. hex 53 45 52 56 45 52 42 42 00 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 209 to (192.168.2.255) on port 138 [2012/01/06 19:12:34, 3] nmbd/nmbd_sendannounce.c:186(send_workgroup_announcement) send_workgroup_announcement: on subnet 192.168.2.1 for workgroup QWHO.NET [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\BROWSE from SERVERBB<00> IP 192.168.2.1 to __MSBROWSE__<01> IP 192.168.2.255 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char .. ...QWHO.NET.. hex 0c 04 20 bf 02 00 51 57 48 4f 2e 4e 45 54 00 00 10 char ..............U. hex 00 00 00 00 00 00 04 09 00 10 00 80 0f 01 55 aa 20 char SERVERBB. hex 53 45 52 56 45 52 42 42 00 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 209 to (192.168.2.255) on port 138 [2012/01/06 19:12:34, 8] lib/util.c:1521(is_myname) is_myname("XPDATEV-PRO") returns 0 [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet 192.168.2.1: netmask= 255.255.255.0: QWHO.NET(1) current master browser = SERVERBB SERVERBB 408c9b2b (SERVERBB) XPDATEV-PRO 40011007 () [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 192.168.2.1: QWHO.NET(1) current master browser = UNKNOWN SERVERBB 40899b2b (SERVERBB) [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.1 port 35328 read: 209 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 209 from (192.168.2.1) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:1994(listen_for_packets) discarding own dgram packet from 192.168.2.1:138 [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.1 port 35328 read: 209 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 209 from (192.168.2.1) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:1994(listen_for_packets) discarding own dgram packet from 192.168.2.1:138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.1 port 35328 read: 209 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 209 from (192.168.2.1) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:1994(listen_for_packets) discarding own dgram packet from 192.168.2.1:138 [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.1 port 35328 read: 209 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 209 from (192.168.2.1) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:1994(listen_for_packets) discarding own dgram packet from 192.168.2.1:138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:34, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC817' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:34, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC817 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC817' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:34, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:34, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC817 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:34, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:34, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:34, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1b> source=2 [2012/01/06 19:12:34, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1b> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:34, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:34, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:34, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:34, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:34, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:34, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:42, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC817' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:42, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:42, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:42, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC817 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:42, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873554) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC817' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:42, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:42, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:42, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC817 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:42, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet 192.168.2.1: netmask= 255.255.255.0: QWHO.NET(1) current master browser = SERVERBB SERVERBB 408c9b2b (SERVERBB) XPDATEV-PRO 40011007 () [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 192.168.2.1: QWHO.NET(1) current master browser = UNKNOWN SERVERBB 40899b2b (SERVERBB) [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_winsserver.c:2499(wins_write_database) wins_write_database: Dump of WINS name list. TS<20> TTL = Mon Jan 9 06:52:51 2012 192.168.2.5 24 SENFT<00> TTL = Tue Jan 10 00:32:14 2012 0.0.0.0 a4 *<00> TTL = PERMANENT 192.168.2.1 64 MAX<00> TTL = Tue Jan 10 00:53:41 2012 192.168.2.21 24 __SAMBA__<20> TTL = PERMANENT 192.168.2.1 64 SENFT-NET.COM<00> TTL = Tue Jan 10 05:49:23 2012 0.0.0.0 a4 QWHO.NET<1c> TTL = Mon Jan 9 19:10:09 2012 192.168.2.1 e4 *<20> TTL = PERMANENT 192.168.2.1 64 __SAMBA__<00> TTL = PERMANENT 192.168.2.1 64 QWHO.NET<00> TTL = Mon Jan 9 19:10:09 2012 0.0.0.0 e4 __MSBROWSE__<01> TTL = Tue Jan 10 00:53:59 2012 0.0.0.0 a4 XPDATEV<20> TTL = Tue Jan 10 18:59:53 2012 192.168.2.8 24 SERVERBB<03> TTL = Mon Jan 9 19:10:09 2012 192.168.2.1 66 HP5850<20> TTL = Thu Jan 12 18:59:52 2012 192.168.2.150 24 SENFT<1e> TTL = Tue Jan 10 00:32:14 2012 0.0.0.0 a4 QWHO.NET<1e> TTL = Mon Jan 9 19:10:09 2012 0.0.0.0 e4 XPDATEV-PRO<00> TTL = Tue Jan 10 05:51:46 2012 192.168.2.6 24 MAXLAPTOP<20> TTL = Tue Jan 10 05:49:23 2012 192.168.2.22 192.168.2.112 24 ARBEITSGRUPPE<00> TTL = Sun Jan 8 17:21:56 2012 0.0.0.0 a4 SERVERBB<00> TTL = Mon Jan 9 19:10:09 2012 192.168.2.1 66 XPDATEV<00> TTL = Tue Jan 10 18:59:53 2012 192.168.2.8 24 MAXLAPTOP<00> TTL = Tue Jan 10 05:49:23 2012 192.168.2.22 192.168.2.112 24 HP5850<00> TTL = Thu Jan 12 18:59:52 2012 192.168.2.150 24 TS<00> TTL = Mon Jan 9 06:52:43 2012 192.168.2.5 24 XPDATEV-PRO<20> TTL = Tue Jan 10 05:51:46 2012 192.168.2.6 24 SERVERBB<20> TTL = Mon Jan 9 19:10:09 2012 192.168.2.1 66 QWHO.NET<1b> TTL = Mon Jan 9 19:10:09 2012 192.168.2.1 64 MAX<20> TTL = Tue Jan 10 00:53:41 2012 192.168.2.21 24 SENFT-NET.COM<1e> TTL = Tue Jan 10 05:49:23 2012 0.0.0.0 a4 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1b> source=2 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1b> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:42, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:42, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:42, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:42, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:42, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:42, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:42, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:42, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:42, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:42, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:42, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:42, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:42, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:49, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC064' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:49, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC064 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:49, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:49, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873562) - last(1325873431) < 900 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 243 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 243 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=69 [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : '' mailslot_name : '\MAILSLOT\NET\GETDC064' acct_control : 0x00000000 (0) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 0: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:49, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for , returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : '' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC064 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B.....Q.W.H. hex 52 00 42 00 42 00 00 00 00 00 51 00 57 00 48 00 20 char O...N.E.T....... hex 4f 00 2e 00 4e 00 45 00 54 00 00 00 01 00 00 00 30 char .... hex ff ff ff ff [2012/01/06 19:12:49, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 226 to (192.168.2.6) on port 138 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:49, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873569) - last(1325873431) < 900 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet 192.168.2.1: netmask= 255.255.255.0: QWHO.NET(1) current master browser = SERVERBB SERVERBB 408c9b2b (SERVERBB) XPDATEV-PRO 40011007 () [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 192.168.2.1: QWHO.NET(1) current master browser = UNKNOWN SERVERBB 40899b2b (SERVERBB) [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:49, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC986' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:49, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC986 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:49, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:49, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873569) - last(1325873431) < 900 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC986' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:49, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:49, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC986 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:49, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:49, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873569) - last(1325873431) < 900 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:49, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:49, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1b> source=2 [2012/01/06 19:12:49, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1b> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:49, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:49, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:49, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:49, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:49, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873569) - last(1325873431) < 900 [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:49, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:57, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC986' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:57, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:57, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:57, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC986 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:57, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:57, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873569) - last(1325873431) < 900 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 267 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 267 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 18 len=93 [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &request: struct nbt_netlogon_packet command : LOGON_SAM_LOGON_REQUEST (18) req : union nbt_netlogon_request(case 18) logon: struct NETLOGON_SAM_LOGON_REQUEST request_count : 0x0000 (0) computer_name : 'XPDATEV-PRO' user_name : 'XPDATEV-PRO$' mailslot_name : '\MAILSLOT\NET\GETDC986' acct_control : 0x00000180 (384) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 1: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0: ACB_NO_AUTH_DATA_REQD 0: ACB_PARTIAL_SECRETS_ACCOUNT 0: ACB_USE_AES_KEYS sid_size : 0x00000000 (0) _pad : DATA_BLOB length=0 sid : S-0-0 nt_version : 0x0000000b (11) 1: NETLOGON_NT_VERSION_1 1: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 1: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:57, 4] nmbd/nmbd_processlogon.c:362(process_logon_packet) process_logon_packet: Logon from 192.168.2.6: code = 0x12 [2012/01/06 19:12:57, 5] nmbd/nmbd_processlogon.c:480(process_logon_packet) process_logon_packet: LOGON_SAM_LOGON_REQUEST request from XPDATEV-PRO(192.168.2.6) for XPDATEV-PRO$, returning logon svr \\SERVERBB domain QWHO.NET code 13 token=ffff [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:247(ndr_print_debug) &nt4: struct NETLOGON_SAM_LOGON_RESPONSE_NT40 command : LOGON_SAM_LOGON_RESPONSE (19) pdc_name : '\\SERVERBB' user_name : 'XPDATEV-PRO$' domain_name : 'QWHO.NET' nt_version : 0x00000001 (1) 1: NETLOGON_NT_VERSION_1 0: NETLOGON_NT_VERSION_5 0: NETLOGON_NT_VERSION_5EX 0: NETLOGON_NT_VERSION_5EX_WITH_IP 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL 0: NETLOGON_NT_VERSION_PDC 0: NETLOGON_NT_VERSION_IP 0: NETLOGON_NT_VERSION_LOCAL 0: NETLOGON_NT_VERSION_GC lmnt_token : 0xffff (65535) lm20_token : 0xffff (65535) [2012/01/06 19:12:57, 3] nmbd/nmbd_processlogon.c:620(process_logon_packet) process_logon_packet: processing delayed initial logon reply for client XPDATEV-PRO(192.168.2.6) [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:2114(send_mailslot) send_mailslot: Sending to mailslot \MAILSLOT\NET\GETDC986 from SERVERBB<00> IP 192.168.2.1 to XPDATEV-PRO<00> IP 192.168.2.6 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:116(debug_browse_data) debug_browse_data(): 0 char ..\.\.S.E.R.V.E. hex 13 00 5c 00 5c 00 53 00 45 00 52 00 56 00 45 00 10 char R.B.B...X.P.D.A. hex 52 00 42 00 42 00 00 00 58 00 50 00 44 00 41 00 20 char T.E.V.-.P.R.O.$. hex 54 00 45 00 56 00 2d 00 50 00 52 00 4f 00 24 00 30 char ..Q.W.H.O...N.E. hex 00 00 51 00 57 00 48 00 4f 00 2e 00 4e 00 45 00 40 char T........... hex 54 00 00 00 01 00 00 00 ff ff ff ff [2012/01/06 19:12:57, 5] libsmb/nmblib.c:841(send_udp) Sending a packet of len 250 to (192.168.2.6) on port 138 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:57, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873577) - last(1325873431) < 900 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet 192.168.2.1: netmask= 255.255.255.0: QWHO.NET(1) current master browser = SERVERBB SERVERBB 408c9b2b (SERVERBB) XPDATEV-PRO 40011007 () [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:276(dump_workgroups) dump_workgroups() dump workgroup on subnet UNICAST_SUBNET: netmask= 192.168.2.1: QWHO.NET(1) current master browser = UNKNOWN SERVERBB 40899b2b (SERVERBB) [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1b> source=2 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1b> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:57, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:57, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:57, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873577) - last(1325873431) < 900 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 7] nmbd/nmbd_packets.c:2009(listen_for_packets) discarding duplicate packet from 192.168.2.6:138 [2012/01/06 19:12:57, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:57, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:57, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:57, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873577) - last(1325873431) < 900 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 10] lib/util_sock.c:278(read_udp_v4_socket) read_udp_v4_socket: ip 192.168.2.6 port 35328 read: 244 [2012/01/06 19:12:57, 5] libsmb/nmblib.c:819(read_packet) Received a packet of len 244 from (192.168.2.6) port 138 [2012/01/06 19:12:57, 9] nmbd/nmbd_namelistdb.c:128(find_name_on_subnet) find_name_on_subnet: on subnet 192.168.2.1 - found name QWHO.NET<1c> source=2 [2012/01/06 19:12:57, 4] nmbd/nmbd_packets.c:1294(process_dgram) process_dgram: datagram from XPDATEV-PRO<00> to QWHO.NET<1c> IP 192.168.2.6 for \MAILSLOT\NET\NETLOGON of type 7 len=70 [2012/01/06 19:12:57, 3] lib/charcnv.c:537(convert_string_talloc) convert_string_talloc: Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 0] lib/charcnv.c:543(convert_string_talloc) Conversion error: Illegal multibyte sequence() [2012/01/06 19:12:57, 1] ../librpc/ndr/ndr.c:414(ndr_pull_error) ndr_pull_error(5): Bad character conversion with flags 0x400042 [2012/01/06 19:12:57, 1] nmbd/nmbd_processlogon.c:353(process_logon_packet) process_logon_packet: Failed to pull logon packet [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:12:57, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873577) - last(1325873431) < 900 [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:12:57, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:13:07, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet 192.168.2.1: found. [2012/01/06 19:13:07, 10] nmbd/nmbd_sendannounce.c:383(announce_myself_to_domain_master_browser) announce_myself_to_domain_master_browser: t (1325873577) - last(1325873431) < 900 [2012/01/06 19:13:07, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found. [2012/01/06 19:13:07, 4] nmbd/nmbd_workgroupdb.c:165(find_workgroup_on_subnet) find_workgroup_on_subnet: workgroup search for QWHO.NET on subnet UNICAST_SUBNET: found.