Attachment 847 Details for Bug 2165 – Level 10 log of a successful connection from GERA

Level 10 log of a successful connection from GERA

gera.log.success (text/plain), 140.64 KB, created by Frank Giessler on 2004-12-16 07:54:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Frank Giessler

Created: 2004-12-16 07:54:42 UTC

Size: 140.64 KB

patch

obsolete

>[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera  last mod_time: Thu Jan  1 01:00:00 1970
>  
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Thu Dec 16 14:11:35 2004
>  
>[2004/12/16 15:17:02, 5] smbd/connection.c:claim_connection(170)
>  claiming  0
>[2004/12/16 15:17:02, 5] smbd/reply.c:reply_special(284)
>  init msg_type=0x81 msg_flags=0x0
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(24,4)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(24,4) wrote 4
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 104
>[2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x68
>[2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091)
>  Transaction 1 of length 108
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=104
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=0
>  smb_tid=0
>  smb_pid=132
>  smb_uid=0
>  smb_mid=37008
>  smt_wct=0
>  smb_bcc=69
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
>  [010] 52 41 4D 20 31 2E 30 00  02 58 45 4E 49 58 20 43  RAM 1.0. .XENIX C
>  [020] 4F 52 45 00 02 4C 41 4E  4D 41 4E 31 2E 30 00 02  ORE..LAN MAN1.0..
>  [030] 4C 4D 31 2E 32 58 30 30  32 00 02 4C 41 4E 4D 41  LM1.2X00 2..LANMA
>  [040] 4E 32 2E 31 00                                    N2.1. 
>[2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886)
>  switch message SMBnegprot (pid 3628) conn 0x0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [XENIX CORE]
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LANMAN1.0]
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LM1.2X002]
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LANMAN2.1]
>[2004/12/16 15:17:02, 10] lib/util.c:set_remote_arch(1952)
>  set_remote_arch: Client arch is 'OS2'
>[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera  last mod_time: Thu Jan  1 01:00:00 1970
>  
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Thu Dec 16 14:11:35 2004
>  
>[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera  last mod_time: Thu Jan  1 01:00:00 1970
>  
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Thu Dec 16 14:11:35 2004
>  
>[2004/12/16 15:17:02, 10] smbd/negprot.c:get_challenge(40)
>  get challenge: creating negprot_global_auth_context
>[2004/12/16 15:17:02, 5] auth/auth.c:make_auth_context_subsystem(506)
>  Using specified auth order
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend rhosts
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'rhosts'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend hostsequiv
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'hostsequiv'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend sam_ignoredomain
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'sam_ignoredomain'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend unix
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'unix'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend winbind
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'winbind'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend smbserver
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'smbserver'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend trustdomain
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'trustdomain'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend ntdomain
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'ntdomain'
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(45)
>  Attempting to register auth backend guest
>[2004/12/16 15:17:02, 5] auth/auth.c:smb_register_auth(57)
>  Successfully added auth method 'guest'
>[2004/12/16 15:17:02, 5] auth/auth.c:load_auth_module(384)
>  load_auth_module: Attempting to find an auth method to match ntdomain
>[2004/12/16 15:17:02, 5] auth/auth.c:load_auth_module(409)
>  load_auth_module: auth method ntdomain has a valid init
>[2004/12/16 15:17:02, 10] smbd/negprot.c:get_challenge(45)
>  get challenge: getting challenge
>[2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(95)
>  auth_get_challenge: module ntdomain did not want to specify a challenge
>[2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(135)
>  auth_context challenge created by random
>[2004/12/16 15:17:02, 5] auth/auth.c:get_ntlm_challenge(136)
>  challenge is: 
>[2004/12/16 15:17:02, 5] lib/util.c:dump_data(1977)
>  [000] 57 C8 DB 44 9A A7 E5 1B                           WÈÛD.§å. 
>[2004/12/16 15:17:02, 3] smbd/negprot.c:reply_negprot(549)
>  Selected protocol LM1.2X002
>[2004/12/16 15:17:02, 5] smbd/negprot.c:reply_negprot(555)
>  negprot index=3
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=69
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=129
>  smb_flg2=16385
>  smb_tid=0
>  smb_pid=132
>  smb_uid=0
>  smb_mid=37008
>  smt_wct=13
>  smb_vwv[ 0]=    3 (0x3)
>  smb_vwv[ 1]=    3 (0x3)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    3 (0x3)
>  smb_vwv[ 6]= 3628 (0xE2C)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=31265 (0x7A21)
>  smb_vwv[ 9]=12688 (0x3190)
>  smb_vwv[10]=65476 (0xFFC4)
>  smb_vwv[11]=    8 (0x8)
>  smb_vwv[12]=    0 (0x0)
>  smb_bcc=8
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 57 C8 DB 44 9A A7 E5 1B                           WÈÛD.§å. 
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(24,73)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(24,73) wrote 73
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 157
>[2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x9d
>[2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091)
>  Transaction 2 of length 161
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=157
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=10
>  smb_flg2=3
>  smb_tid=1
>  smb_pid=132
>  smb_uid=0
>  smb_mid=37073
>  smt_wct=10
>  smb_vwv[ 0]=  117 (0x75)
>  smb_vwv[ 1]=  127 (0x7F)
>  smb_vwv[ 2]= 4356 (0x1104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 3628 (0xE2C)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   24 (0x18)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=72
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 48 3B 5A F2 51 03 93 1D  3E C3 F7 01 F2 05 43 EA  H;ZòQ... >Ã÷.ò.Cê
>  [010] F9 20 9A 5C 94 AD A1 09  47 49 45 53 53 4C 45 52  ù .\.¡. GIESSLER
>  [020] 00 42 49 4F 4D 41 47 00  4F 53 2F 32 20 57 61 72  .BIOMAG. OS/2 War
>  [030] 70 20 20 20 00 49 42 4D  20 4C 41 4E 20 53 65 72  p   .IBM  LAN Ser
>  [040] 76 65 72 20 35 2E 30 00                           ver 5.0. 
>[2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886)
>  switch message SMBsesssetupX (pid 3628) conn 0x0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:02, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
>  wct=10 flg2=0x3
>[2004/12/16 15:17:02, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2004/12/16 15:17:02, 3] smbd/sesssetup.c:reply_sesssetup_and_X(804)
>  sesssetupX:name=[]\[GIESSLER]@[gera]
>[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera  last mod_time: Thu Jan  1 01:00:00 1970
>  
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Thu Dec 16 14:11:35 2004
>  
>[2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info_map(225)
>  make_user_info_map: Mapping user []\[GIESSLER] from workstation [gera]
>[2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(285)
>  Cache entry with key = TDOM/BIOMAG couldn't be found
>[2004/12/16 15:17:02, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
>  no entry for trusted domain BIOMAG found.
>[2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(133)
>  attempting to make a user_info for GIESSLER (GIESSLER)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(143)
>  making strings for GIESSLER's user_info struct
>[2004/12/16 15:17:02, 5] auth/auth_util.c:make_user_info(185)
>  making blobs for GIESSLER's user_info struct
>[2004/12/16 15:17:02, 10] auth/auth_util.c:make_user_info(201)
>  made an encrypted user_info for GIESSLER (GIESSLER)
>[2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  Checking password for unmapped user []\[GIESSLER]@[gera] with the new password interface
>[2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(222)
>  check_ntlm_password:  mapped user is: [BIOMAG]\[GIESSLER]@[gera]
>[2004/12/16 15:17:02, 10] auth/auth.c:check_ntlm_password(231)
>  check_ntlm_password: auth_context challenge created by random
>[2004/12/16 15:17:02, 10] auth/auth.c:check_ntlm_password(233)
>  challenge is: 
>[2004/12/16 15:17:02, 5] lib/util.c:dump_data(1977)
>  [000] 57 C8 DB 44 9A A7 E5 1B                           WÈÛD.§å. 
>[2004/12/16 15:17:02, 4] passdb/secrets.c:secrets_fetch_trust_account_password(290)
>  Using cleartext machine password
>[2004/12/16 15:17:02, 4] passdb/secrets.c:secrets_fetch_trust_account_password(290)
>  Using cleartext machine password
>[2004/12/16 15:17:02, 8] libsmb/namequery.c:get_sorted_dc_list(1433)
>  get_sorted_dc_list: attempting lookup using [lmhosts wins host bcast]
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:internal_resolve_name(1028)
>  internal_resolve_name: looking up stendal#20
>[2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(263)
>  Returning valid cache entry: key = NBT/STENDAL#20, value = 141.35.200.65:0, timeout = Thu Dec 16 15:21:27 2004
>  
>[2004/12/16 15:17:02, 5] libsmb/namecache.c:namecache_fetch(201)
>  name stendal#20 found.
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:remove_duplicate_addrs2(320)
>  remove_duplicate_addrs2: looking for duplicate address/port pairs
>[2004/12/16 15:17:02, 4] libsmb/namequery.c:get_dc_list(1406)
>  get_dc_list: returning 1 ip addresses in an ordered list
>[2004/12/16 15:17:02, 4] libsmb/namequery.c:get_dc_list(1407)
>  get_dc_list: 141.35.200.65:0 
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:name_status_find(188)
>  name_status_find: looking up BIOMAG#1c at 141.35.200.65
>[2004/12/16 15:17:02, 10] lib/gencache.c:gencache_get(285)
>  Cache entry with key = NBT/BIOMAG#1C.20.141.35.200.65 couldn't be found
>[2004/12/16 15:17:02, 5] libsmb/namecache.c:namecache_status_fetch(308)
>  namecache_status_fetch: no entry for NBT/BIOMAG#1C.20.141.35.200.65 found.
>[2004/12/16 15:17:02, 10] lib/gencache.c:gencache_del(214)
>  Deleting cache entry (key = NBT/BIOMAG#1C.20.141.35.200.65)
>[2004/12/16 15:17:02, 10] lib/util_sock.c:open_socket_in(717)
>  bind succeeded on port 0
>[2004/12/16 15:17:02, 5] libsmb/nmblib.c:send_udp(776)
>  Sending a packet of len 50 to (141.35.200.65) on port 137
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_udp_socket(230)
>  read_udp_socket: lastip 141.35.200.65 lastport 137 read: 265
>[2004/12/16 15:17:02, 10] libsmb/nmblib.c:parse_nmb(503)
>  parse_nmb: packet id = 24002
>[2004/12/16 15:17:02, 5] libsmb/nmblib.c:read_packet(754)
>  Received a packet of len 265 from (141.35.200.65) port 137
>[2004/12/16 15:17:02, 4] libsmb/nmblib.c:debug_nmb_packet(109)
>  nmb packet from 141.35.200.65(137) header: id=24002 opcode=Query(0) response=Yes
>      header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
>      header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
>      answers: nmb_name=BIOMAG<1c> rr_type=33 rr_class=1 ttl=0
>      answers   0 char .STENDAL           hex 095354454E44414C2020202020202020
>      answers  10 char .D.STENDAL         hex 0044005354454E44414C202020202020
>      answers  20 char   .D.STENDAL       hex 20200344005354454E44414C20202020
>      answers  30 char      D...__MSBRO   hex 2020202020440001025F5F4D5342524F
>      answers  40 char WSE__....BIOMAG    hex 5753455F5F0201C40042494F4D414720
>      answers  50 char         ...BIOMA   hex 202020202020202000C40042494F4D41
>      answers  60 char G         .D.BIO   hex 472020202020202020201B440042494F
>      answers  70 char MAG         ...B   hex 4D41472020202020202020201CC40042
>      answers  80 char IOMAG         .D   hex 494F4D41472020202020202020201D44
>      answers  90 char .BIOMAG            hex 0042494F4D4147202020202020202020
>      answers  a0 char ................   hex 1EC40000000000000000000000000000
>      answers  b0 char ................   hex 00000000000000000000000000000000
>      answers  c0 char ................   hex 00000000000000000000000000000000
>      answers  d0 char .   hex 00
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  STENDAL#00: flags = 0x44
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  STENDAL#03: flags = 0x44
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  STENDAL#20: flags = 0x44
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  __MSBROWSE__#01: flags = 0xc4
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  BIOMAG#00: flags = 0xc4
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  BIOMAG#1b: flags = 0x44
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  BIOMAG#1c: flags = 0xc4
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  BIOMAG#1d: flags = 0x44
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:parse_node_status(70)
>  BIOMAG#1e: flags = 0xc4
>[2004/12/16 15:17:02, 10] libsmb/namequery.c:name_status_find(227)
>  name_status_find: name found, name STENDAL ip address is 141.35.200.65
>[2004/12/16 15:17:02, 3] libsmb/namequery_dc.c:rpc_dc_name(145)
>  rpc_dc_name: Returning DC STENDAL (141.35.200.65) for domain BIOMAG
>[2004/12/16 15:17:02, 10] passdb/secrets.c:secrets_named_mutex(702)
>  secrets_named_mutex: got mutex for STENDAL
>[2004/12/16 15:17:02, 3] libsmb/cliconnect.c:cli_start_connection(1382)
>  Connecting to host=STENDAL
>[2004/12/16 15:17:02, 3] lib/util_sock.c:open_socket_out(752)
>  Connecting to 141.35.200.65 at port 445
>[2004/12/16 15:17:02, 2] lib/util_sock.c:open_socket_out(789)
>  error connecting to 141.35.200.65:445 (Connection refused)
>[2004/12/16 15:17:02, 3] lib/util_sock.c:open_socket_out(752)
>  Connecting to 141.35.200.65 at port 139
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_KEEPALIVE = 0
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_REUSEADDR = 0
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_BROADCAST = 0
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option TCP_NODELAY = 1
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_LOWDELAY = 0
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_THROUGHPUT = 0
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDBUF = 49152
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVBUF = 49640
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145)
>  Could not test socket option SO_SNDLOWAT.
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145)
>  Could not test socket option SO_RCVLOWAT.
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145)
>  Could not test socket option SO_SNDTIMEO.
>[2004/12/16 15:17:02, 5] lib/util_sock.c:print_socket_options(145)
>  Could not test socket option SO_RCVTIMEO.
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,72)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,72) wrote 72
>[2004/12/16 15:17:02, 5] libsmb/cliconnect.c:cli_session_request(1207)
>  Sent session request
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 0
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=0
>  smb_com=0x0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=0
>  smb_flg2=0
>  smb_tid=0
>  smb_pid=0
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=0
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,183)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,183) wrote 183
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 84
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=84
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=0
>  smb_pid=3628
>  smb_uid=0
>  smb_mid=2
>  smt_wct=17
>  smb_vwv[ 0]=    7 (0x7)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]= 1536 (0x600)
>  smb_vwv[ 8]=   86 (0x56)
>  smb_vwv[ 9]=63744 (0xF900)
>  smb_vwv[10]=  227 (0xE3)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=27907 (0x6D03)
>  smb_vwv[13]=31209 (0x79E9)
>  smb_vwv[14]=50403 (0xC4E3)
>  smb_vwv[15]=50177 (0xC401)
>  smb_vwv[16]= 2303 (0x8FF)
>  smb_bcc=15
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 7F 87 86 2C 68 20 6F 41  42 49 4F 4D 41 47 00     ...,h oA BIOMAG.
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=84
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=0
>  smb_pid=3628
>  smb_uid=0
>  smb_mid=2
>  smt_wct=17
>  smb_vwv[ 0]=    7 (0x7)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]= 1536 (0x600)
>  smb_vwv[ 8]=   86 (0x56)
>  smb_vwv[ 9]=63744 (0xF900)
>  smb_vwv[10]=  227 (0xE3)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=27907 (0x6D03)
>  smb_vwv[13]=31209 (0x79E9)
>  smb_vwv[14]=50403 (0xC4E3)
>  smb_vwv[15]=50177 (0xC401)
>  smb_vwv[16]= 2303 (0x8FF)
>  smb_bcc=15
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 7F 87 86 2C 68 20 6F 41  42 49 4F 4D 41 47 00     ...,h oA BIOMAG.
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,78)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,78) wrote 78
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 66
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=66
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=0
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=25
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 55 6E 69 78 00 53 61 6D  62 61 20 32 2E 32 2E 31  Unix.Sam ba 2.2.1
>  [010] 32 00 42 49 4F 4D 41 47  00                       2.BIOMAG .
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=66
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=0
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=3
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=25
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 55 6E 69 78 00 53 61 6D  62 61 20 32 2E 32 2E 31  Unix.Sam ba 2.2.1
>  [010] 32 00 42 49 4F 4D 41 47  00                       2.BIOMAG .
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,67)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,67) wrote 67
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 49
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=49
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=4
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=8
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 49 50 43 00 49 50 43 00                           IPC.IPC. 
>[2004/12/16 15:17:02, 10] libsmb/clientgen.c:cli_init_creds(217)
>  cli_init_creds: user  domain 
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,97)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,97) wrote 97
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 103
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=5
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=55296 (0xD800)
>  smb_vwv[ 3]=  374 (0x176)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1319)
>  Bind RPC Pipe[76d8]: \PIPE\NETLOGON
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:valid_pipe_name(1215)
>  Bind Abstract Syntax: [000] 12 34 56 78 12 34 AB CD  EF 00 01 23 45 67 CF FB  .4Vx.4«Í ï..#EgÏû
>  [010] 00 00 00 01                                       .... 
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:valid_pipe_name(1218)
>  Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9  9F E8 08 00 2B 10 48 60  ..]..ë.É .è..+.H`
>  [010] 00 00 00 02                                       .... 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0b
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0048
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_rb 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0010 max_tsize: 10b8
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0012 max_rsize: 10b8
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0014 assoc_gid: 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0018 num_elements: 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      001c context_id  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      001e num_syntaxes: 01
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00001f smb_io_rpc_iface 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0020 data   : 12345678
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0024 data   : 1234
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0026 data   : abcd
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0028 data   : ef 00 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002a data   : 01 23 45 67 cf fb 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 version: 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000034 smb_io_rpc_iface 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000034 smb_io_uuid uuid
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0034 data   : 8a885d04
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0038 data   : 1ceb
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              003a data   : 11c9
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              003c data   : 9f e8 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              003e data   : 08 00 2b 10 48 60 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0044 version: 00000002
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
>  rpc_api_pipe: fnum:76d8
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=146
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=18433
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   74 (0x4A)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   74 (0x4A)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30424 (0x76D8)
>  smb_bcc=79
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 00 05  00 0B 03 10 00 00 00 48  \PIPE\.. .......H
>  [010] 00 00 00 01 00 00 00 B8  10 B8 10 00 00 00 00 01  .......¸ .¸......
>  [020] 00 00 00 00 00 01 00 78  56 34 12 34 12 CD AB EF  .......x V4.4.Í«ï
>  [030] 00 01 23 45 67 CF FB 01  00 00 00 04 5D 88 8A EB  ..#EgÏû. ....]..ë
>  [040] 1C C9 11 9F E8 08 00 2B  10 48 60 02 00 00 00     .É..è..+ .H`....
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,150)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,150) wrote 150
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 124
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 30 16 30 16 F0 53 00  00 0C 00 5C 50 49 50 45  .0.0.ðS. ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 30 16 30 16 F0 53 00  00 0C 00 5C 50 49 50 45  .0.0.ðS. ...\PIPE
>  [020] 5C 6C 73 61 73 73 00 00  00 01 00 00 00 00 00 00  \lsass.. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..ë.É ..è..+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 68
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0044
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
>  rpc_api_pipe: len left: 0 smbtrans read: 68
>[2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
>  rpc_api_pipe: fragment first and last both set
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1395)
>  rpc_pipe_bind: rpc_api_pipe returned OK.
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_ba 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_rpc_hdr_bba 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0010 max_tsize: 1630
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0012 max_rsize: 1630
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0014 assoc_gid: 000053f0
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_rpc_addr_str 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0018 len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          001a str: \PIPE\lsass.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000026 smb_io_rpc_results 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>          0028 num_results: 01
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          002c result     : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          002e reason     : 0000
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000030 smb_io_rpc_iface 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000030 smb_io_uuid uuid
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0030 data   : 8a885d04
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0034 data   : 1ceb
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0036 data   : 11c9
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0038 data   : 9f e8 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              003a data   : 08 00 2b 10 48 60 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0040 version: 00000002
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:check_bind_response(1271)
>  bind_rpc_pipe: accepted!
>[2004/12/16 15:17:02, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
>  cli_net_req_chal: LSA Request Challenge from MOSKAU to STENDAL: 8384CF4AB2DBEFD3
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_req_chal(676)
>  init_q_req_chal: 676
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_req_chal(685)
>  init_q_req_chal: 685
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_req_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 undoc_buffer: 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000004 smb_io_unistr2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 uni_max_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c uni_str_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0010 buffer     : \.\.S.T.E.N.D.A.L...
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000024 smb_io_unistr2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0024 uni_max_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0028 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c uni_str_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0030 buffer     : M.O.S.K.A.U...
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00003e smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          003e data: 83 84 cf 4a b2 db ef d3 
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
>  create_rpc_request: opnum: 0x4 data_len: 0x5e
>[2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
>  create_rpc_request: data_len: 5e auth_len: 0 alloc_hint: 4e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 005e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000002
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 0000004e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0016 opnum     : 0004
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
>  rpc_api_pipe: fnum:76d8
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=168
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=18433
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   94 (0x5E)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 5680 (0x1630)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   74 (0x4A)
>  smb_vwv[11]=   94 (0x5E)
>  smb_vwv[12]=   74 (0x4A)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30424 (0x76D8)
>  smb_bcc=101
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 00 05  00 00 03 10 00 00 00 5E  \PIPE\.. .......^
>  [010] 00 00 00 02 00 00 00 4E  00 00 00 00 00 04 00 01  .......N ........
>  [020] 00 00 00 0A 00 00 00 00  00 00 00 0A 00 00 00 5C  ........ .......\
>  [030] 00 5C 00 53 00 54 00 45  00 4E 00 44 00 41 00 4C  .\.S.T.E .N.D.A.L
>  [040] 00 00 00 07 00 00 00 00  00 00 00 07 00 00 00 4D  ........ .......M
>  [050] 00 4F 00 53 00 4B 00 41  00 55 00 00 00 83 84 CF  .O.S.K.A .U.....Ï
>  [060] 4A B2 DB EF D3                                    J²ÛïÓ 
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,172)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,172) wrote 172
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 92
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 24 00 00 00 02 00 00  ........ .$......
>  [010] 00 0C 00 00 00 00 00 00  00 4D 8C 21 63 DD C8 33  ........ .M.!cÝÈ3
>  [020] F2 00 00 00 00                                    ò.... 
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=92
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   36 (0x24)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   36 (0x24)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=37
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 24 00 00 00 02 00 00  ........ .$......
>  [010] 00 0C 00 00 00 00 00 00  00 4D 8C 21 63 DD C8 33  ........ .M.!cÝÈ3
>  [020] F2 00 00 00 00                                    ò.... 
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 36
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 02
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0024
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000002
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 0000000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0016 cancel_ct : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0017 reserved  : 00
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
>  rpc_api_pipe: len left: 0 smbtrans read: 36
>[2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
>  rpc_api_pipe: fragment first and last both set
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_req_chal 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          0018 data: 4d 8c 21 63 dd c8 33 f2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
>      0020 status: NT_STATUS_OK
>[2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_session_key(59)
>  cred_session_key
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(61)
>  	clnt_chal: 8384CF4AB2DBEFD3
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(62)
>  	srv_chal : 4D8C2163DDC833F2
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(63)
>  	clnt+srv : D010F1AD8FA423C6
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_session_key(64)
>  	sess_key : 93EF72B007AECAB8
>[2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92)
>  	sess_key : 93EF72B007AECAB8
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 8384CF4AB2DBEFD3
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94)
>  	timestamp: 0
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95)
>  	timecred : 8384CF4AB2DBEFD3
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96)
>  	calc_cred: 078BB05635D7AA29
>[2004/12/16 15:17:02, 4] rpc_client/cli_netlogon.c:cli_net_auth2(108)
>  cli_net_auth2: srv:\\STENDAL acct:MOSKAU$ sc:2 mc: MOSKAU chal 078BB05635D7AA29 neg: 400701ff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_auth_2(797)
>  init_q_auth_2: 797
>[2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_log_info(1319)
>  make_log_info 1319
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_q_auth_2(803)
>  init_q_auth_2: 803
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_auth_2 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_log_info 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0000 undoc_buffer: 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000004 smb_io_unistr2 unistr2
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0004 uni_max_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0008 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              000c uni_str_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0010 buffer     : \.\.S.T.E.N.D.A.L...
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_unistr2 unistr2
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0024 uni_max_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0028 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              002c uni_str_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0030 buffer     : M.O.S.K.A.U.$...
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0040 sec_chan: 0002
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000042 smb_io_unistr2 unistr2
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0044 uni_max_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0048 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              004c uni_str_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0050 buffer     : M.O.S.K.A.U...
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00005e smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          005e data: 07 8b b0 56 35 d7 aa 29 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000066 net_io_neg_flags 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0068 neg_flags: 400701ff
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
>  create_rpc_request: opnum: 0xf data_len: 0x84
>[2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
>  create_rpc_request: data_len: 84 auth_len: 0 alloc_hint: 74
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0084
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000003
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 00000074
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0016 opnum     : 000f
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
>  rpc_api_pipe: fnum:76d8
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=206
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=18433
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=8
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  132 (0x84)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 5680 (0x1630)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   74 (0x4A)
>  smb_vwv[11]=  132 (0x84)
>  smb_vwv[12]=   74 (0x4A)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30424 (0x76D8)
>  smb_bcc=139
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 00 05  00 00 03 10 00 00 00 84  \PIPE\.. ........
>  [010] 00 00 00 03 00 00 00 74  00 00 00 00 00 0F 00 01  .......t ........
>  [020] 00 00 00 0A 00 00 00 00  00 00 00 0A 00 00 00 5C  ........ .......\
>  [030] 00 5C 00 53 00 54 00 45  00 4E 00 44 00 41 00 4C  .\.S.T.E .N.D.A.L
>  [040] 00 00 00 08 00 00 00 00  00 00 00 08 00 00 00 4D  ........ .......M
>  [050] 00 4F 00 53 00 4B 00 41  00 55 00 24 00 00 00 02  .O.S.K.A .U.$....
>  [060] 00 00 00 07 00 00 00 00  00 00 00 07 00 00 00 4D  ........ .......M
>  [070] 00 4F 00 53 00 4B 00 41  00 55 00 00 00 07 8B B0  .O.S.K.A .U.....°
>  [080] 56 35 D7 AA 29 00 00 FF  01 07 40                 V5×ª)..ÿ ..@
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,210)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,210) wrote 210
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 96
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=8
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 8C 53 91 BC A5 BB A0  ........ ..S.¼¥» 
>  [020] 4F FF 01 00 00 00 00 00  00                       Oÿ...... .
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=8
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 28 00 00 00 03 00 00  ........ .(......
>  [010] 00 10 00 00 00 00 00 00  00 8C 53 91 BC A5 BB A0  ........ ..S.¼¥» 
>  [020] 4F FF 01 00 00 00 00 00  00                       Oÿ...... .
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 40
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 02
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0028
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000003
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 00000010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0016 cancel_ct : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0017 reserved  : 00
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
>  rpc_api_pipe: len left: 0 smbtrans read: 40
>[2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
>  rpc_api_pipe: fragment first and last both set
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_auth_2 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          0018 data: 8c 53 91 bc a5 bb a0 4f 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 net_io_neg_flags 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 neg_flags: 000001ff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
>      0024 status: NT_STATUS_OK
>[2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92)
>  	sess_key : 93EF72B007AECAB8
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 4D8C2163DDC833F2
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94)
>  	timestamp: 0
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95)
>  	timecred : 4D8C2163DDC833F2
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96)
>  	calc_cred: 8C5391BCA5BBA04F
>[2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_assert(121)
>  cred_assert
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(123)
>  	challenge : 8C5391BCA5BBA04F
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(124)
>  	calculated: 8C5391BCA5BBA04F
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_assert(128)
>  credentials check ok
>[2004/12/16 15:17:02, 4] libsmb/credentials.c:cred_create(90)
>  cred_create
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(92)
>  	sess_key : 93EF72B007AECAB8
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(93)
>  	stor_cred: 078BB05635D7AA29
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(94)
>  	timestamp: 41c198de
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(95)
>  	timecred : E523729835D7AA29
>[2004/12/16 15:17:02, 5] libsmb/credentials.c:cred_create(96)
>  	calc_cred: 7A40300D3C5A6666
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_id_info2(1180)
>  init_id_info2: 1180
>[2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_logon_id(1498)
>  make_logon_id: 1498
>[2004/12/16 15:17:02, 5] rpc_parse/parse_net.c:init_sam_info(1286)
>  init_sam_info: 1286
>[2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_clnt_info2(1413)
>  make_clnt_info: 1413
>[2004/12/16 15:17:02, 5] rpc_parse/parse_misc.c:init_clnt_srv(1258)
>  init_clnt_srv: 1258
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 net_io_q_sam_logon 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_sam_info 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000000 smb_io_clnt_info2 
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000000 smb_io_clnt_srv 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0000 undoc_buffer : 00000001
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000004 smb_io_unistr2 unistr2
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0004 uni_max_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0008 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      000c uni_str_len: 0000000a
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                      0010 buffer     : \.\.S.T.E.N.D.A.L...
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0024 undoc_buffer2: 00000001
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000028 smb_io_unistr2 unistr2
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0028 uni_max_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      002c offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0030 uni_str_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                      0034 buffer     : M.O.S.K.A.U...
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0044 ptr_cred: 00000001
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000048 smb_io_cred 
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000048 smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>                      0048 data: 7a 40 30 0d 3c 5a 66 66 
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000050 smb_io_utime 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0050 time: 41c198de
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0054 ptr_rtn_cred : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000058 smb_io_cred 
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000058 smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>                  0058 data: 00 00 00 00 00 00 00 00 
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000060 smb_io_utime 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0060 time: 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0064 logon_level  : 0002
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000066 smb_io_sam_info logon_info
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0066 switch_value : 0002
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000068 net_io_id_info2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0068 ptr_id_info2: 00000001
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  00006c smb_io_unihdr unihdr
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      006c uni_str_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      006e uni_max_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0070 buffer     : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0074 param_ctrl: 00000000
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000078 smb_io_logon_id 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0078 low : 0000dead
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      007c high: 0000beef
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000080 smb_io_unihdr unihdr
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      0080 uni_str_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      0082 uni_max_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0084 buffer     : 00000001
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000088 smb_io_unihdr unihdr
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      0088 uni_str_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      008a uni_max_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      008c buffer     : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>                  0090 lm_chal: 57 c8 db 44 9a a7 e5 1b 
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000098 smb_io_strhdr hdr_nt_chal_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      0098 str_str_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      009a str_max_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      009c buffer     : 00000000
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000a0 smb_io_strhdr hdr_lm_chal_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      00a0 str_str_len: 0018
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                      00a2 str_max_len: 0018
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00a4 buffer     : 00000001
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000a8 smb_io_unistr2 uni_domain_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00a8 uni_max_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00ac offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00b0 uni_str_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                      00b4 buffer     : B.I.O.M.A.G.
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000c0 smb_io_unistr2 uni_user_name  
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00c0 uni_max_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00c4 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00c8 uni_str_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                      00cc buffer     : G.I.E.S.S.L.E.R.
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000dc smb_io_unistr2 uni_wksta_name 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00dc uni_max_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00e0 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00e4 uni_str_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                      00e8 buffer     : \.\.g.e.r.a.
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000f4 smb_io_string2 - NULL nt_chal_resp
>[2004/12/16 15:17:02, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0000f4 smb_io_string2 lm_chal_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00f4 str_max_len: 00000018
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00f8 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      00fc str_str_len: 00000018
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_string2(968)
>                      0100 buffer     : H;ZòQ...>Ã÷.ò.Cêù .\.¡.
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0118 validation_level: 0003
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:create_rpc_request(852)
>  create_rpc_request: opnum: 0x2 data_len: 0x132
>[2004/12/16 15:17:02, 10] rpc_client/cli_pipe.c:create_rpc_request(869)
>  create_rpc_request: data_len: 132 auth_len: 0 alloc_hint: 122
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr    
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0132
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000004
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_req hdr_req
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 00000122
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0016 opnum     : 0002
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(421)
>  rpc_api_pipe: fnum:76d8
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=380
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=18433
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=9
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  306 (0x132)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 5680 (0x1630)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   74 (0x4A)
>  smb_vwv[11]=  306 (0x132)
>  smb_vwv[12]=   74 (0x4A)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30424 (0x76D8)
>  smb_bcc=313
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 00 05  00 00 03 10 00 00 00 32  \PIPE\.. .......2
>  [010] 01 00 00 04 00 00 00 22  01 00 00 00 00 02 00 01  ......." ........
>  [020] 00 00 00 0A 00 00 00 00  00 00 00 0A 00 00 00 5C  ........ .......\
>  [030] 00 5C 00 53 00 54 00 45  00 4E 00 44 00 41 00 4C  .\.S.T.E .N.D.A.L
>  [040] 00 00 00 01 00 00 00 07  00 00 00 00 00 00 00 07  ........ ........
>  [050] 00 00 00 4D 00 4F 00 53  00 4B 00 41 00 55 00 00  ...M.O.S .K.A.U..
>  [060] 00 00 00 01 00 00 00 7A  40 30 0D 3C 5A 66 66 DE  .......z @0.<ZffÞ
>  [070] 98 C1 41 01 00 00 00 00  00 00 00 00 00 00 00 00  .ÁA..... ........
>  [080] 00 00 00 02 00 02 00 01  00 00 00 0C 00 0C 00 01  ........ ........
>  [090] 00 00 00 00 00 00 00 AD  DE 00 00 EF BE 00 00 10  ....... Þ..ï¾...
>  [0A0] 00 10 00 01 00 00 00 0C  00 0C 00 01 00 00 00 57  ........ .......W
>  [0B0] C8 DB 44 9A A7 E5 1B 00  00 00 00 00 00 00 00 18  ÈÛD.§å.. ........
>  [0C0] 00 18 00 01 00 00 00 06  00 00 00 00 00 00 00 06  ........ ........
>  [0D0] 00 00 00 42 00 49 00 4F  00 4D 00 41 00 47 00 08  ...B.I.O .M.A.G..
>  [0E0] 00 00 00 00 00 00 00 08  00 00 00 47 00 49 00 45  ........ ...G.I.E
>  [0F0] 00 53 00 53 00 4C 00 45  00 52 00 06 00 00 00 00  .S.S.L.E .R......
>  [100] 00 00 00 06 00 00 00 5C  00 5C 00 67 00 65 00 72  .......\ .\.g.e.r
>  [110] 00 61 00 18 00 00 00 00  00 00 00 18 00 00 00 48  .a...... .......H
>  [120] 3B 5A F2 51 03 93 1D 3E  C3 F7 01 F2 05 43 EA F9  ;ZòQ...> Ã÷.ò.Cêù
>  [130] 20 9A 5C 94 AD A1 09 03  00                        .\.¡.. .
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,384)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,384) wrote 384
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 652
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=652
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  596 (0x254)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  596 (0x254)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=597
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 54 02 00 00 04 00 00  ........ .T......
>  [010] 00 3C 02 00 00 00 00 00  00 01 00 00 00 E6 E3 2E  .<...... .....æã.
>  [020] B0 DE F8 97 A0 00 00 00  00 03 00 00 00 01 00 00  °Þø. ... ........
>  [030] 00 00 00 00 00 00 00 00  00 FF FF FF FF FF FF FF  ........ .ÿÿÿÿÿÿÿ
>  [040] 7F FF FF FF FF FF FF FF  7F 00 EB 6A 36 52 B0 C4  .ÿÿÿÿÿÿÿ ..ëj6R°Ä
>  [050] 01 00 EB 6A 36 52 B0 C4  01 00 C3 19 64 FA F3 C4  ..ëj6R°Ä ..Ã.dúóÄ
>  [060] 01 10 00 10 00 01 00 00  00 1C 00 1C 00 01 00 00  ........ ........
>  [070] 00 26 00 26 00 01 00 00  00 36 00 36 00 01 00 00  .&.&.... .6.6....
>  [080] 00 24 00 24 00 01 00 00  00 00 00 00 00 00 00 00  .$.$.... ........
>  [090] 00 00 00 00 00 B6 04 00  00 FD 03 00 00 02 00 00  .....¶.. .ý......
>  [0A0] 00 01 00 00 00 20 00 00  00 00 00 00 00 00 00 00  ..... .. ........
>  [0B0] 00 00 00 00 00 00 00 00  00 0E 00 0E 00 01 00 00  ........ ........
>  [0C0] 00 0C 00 0C 00 01 00 00  00 01 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 08 00 00  ........ ........
>  [100] 00 00 00 00 00 08 00 00  00 67 00 69 00 65 00 73  ........ .g.i.e.s
>  [110] 00 73 00 6C 00 65 00 72  00 0E 00 00 00 00 00 00  .s.l.e.r ........
>  [120] 00 0E 00 00 00 46 00 72  00 61 00 6E 00 6B 00 20  .....F.r .a.n.k. 
>  [130] 00 47 00 69 00 65 00 73  00 73 00 6C 00 65 00 72  .G.i.e.s .s.l.e.r
>  [140] 00 13 00 00 00 00 00 00  00 13 00 00 00 73 00 63  ........ .....s.c
>  [150] 00 72 00 69 00 70 00 74  00 73 00 5C 00 6E 00 74  .r.i.p.t .s.\.n.t
>  [160] 00 6C 00 6F 00 67 00 6F  00 6E 00 2E 00 63 00 6D  .l.o.g.o .n...c.m
>  [170] 00 64 00 00 00 1B 00 00  00 00 00 00 00 1B 00 00  .d...... ........
>  [180] 00 5C 00 5C 00 73 00 74  00 65 00 6E 00 64 00 61  .\.\.s.t .e.n.d.a
>  [190] 00 6C 00 5C 00 50 00 72  00 6F 00 66 00 69 00 6C  .l.\.P.r .o.f.i.l
>  [1A0] 00 65 00 73 00 5C 00 67  00 69 00 65 00 73 00 73  .e.s.\.g .i.e.s.s
>  [1B0] 00 6C 00 65 00 72 00 00  00 12 00 00 00 00 00 00  .l.e.r.. ........
>  [1C0] 00 12 00 00 00 5C 00 5C  00 73 00 74 00 65 00 6E  .....\.\ .s.t.e.n
>  [1D0] 00 64 00 61 00 6C 00 5C  00 67 00 69 00 65 00 73  .d.a.l.\ .g.i.e.s
>  [1E0] 00 73 00 6C 00 65 00 72  00 02 00 00 00 FD 03 00  .s.l.e.r .....ý..
>  [1F0] 00 07 00 00 00 01 02 00  00 07 00 00 00 07 00 00  ........ ........
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=652
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=9
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  596 (0x254)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  596 (0x254)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=597
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 05 00 02 03 10 00 00  00 54 02 00 00 04 00 00  ........ .T......
>  [010] 00 3C 02 00 00 00 00 00  00 01 00 00 00 E6 E3 2E  .<...... .....æã.
>  [020] B0 DE F8 97 A0 00 00 00  00 03 00 00 00 01 00 00  °Þø. ... ........
>  [030] 00 00 00 00 00 00 00 00  00 FF FF FF FF FF FF FF  ........ .ÿÿÿÿÿÿÿ
>  [040] 7F FF FF FF FF FF FF FF  7F 00 EB 6A 36 52 B0 C4  .ÿÿÿÿÿÿÿ ..ëj6R°Ä
>  [050] 01 00 EB 6A 36 52 B0 C4  01 00 C3 19 64 FA F3 C4  ..ëj6R°Ä ..Ã.dúóÄ
>  [060] 01 10 00 10 00 01 00 00  00 1C 00 1C 00 01 00 00  ........ ........
>  [070] 00 26 00 26 00 01 00 00  00 36 00 36 00 01 00 00  .&.&.... .6.6....
>  [080] 00 24 00 24 00 01 00 00  00 00 00 00 00 00 00 00  .$.$.... ........
>  [090] 00 00 00 00 00 B6 04 00  00 FD 03 00 00 02 00 00  .....¶.. .ý......
>  [0A0] 00 01 00 00 00 20 00 00  00 00 00 00 00 00 00 00  ..... .. ........
>  [0B0] 00 00 00 00 00 00 00 00  00 0E 00 0E 00 01 00 00  ........ ........
>  [0C0] 00 0C 00 0C 00 01 00 00  00 01 00 00 00 00 00 00  ........ ........
>  [0D0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0E0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
>  [0F0] 00 00 00 00 00 00 00 00  00 00 00 00 00 08 00 00  ........ ........
>  [100] 00 00 00 00 00 08 00 00  00 67 00 69 00 65 00 73  ........ .g.i.e.s
>  [110] 00 73 00 6C 00 65 00 72  00 0E 00 00 00 00 00 00  .s.l.e.r ........
>  [120] 00 0E 00 00 00 46 00 72  00 61 00 6E 00 6B 00 20  .....F.r .a.n.k. 
>  [130] 00 47 00 69 00 65 00 73  00 73 00 6C 00 65 00 72  .G.i.e.s .s.l.e.r
>  [140] 00 13 00 00 00 00 00 00  00 13 00 00 00 73 00 63  ........ .....s.c
>  [150] 00 72 00 69 00 70 00 74  00 73 00 5C 00 6E 00 74  .r.i.p.t .s.\.n.t
>  [160] 00 6C 00 6F 00 67 00 6F  00 6E 00 2E 00 63 00 6D  .l.o.g.o .n...c.m
>  [170] 00 64 00 00 00 1B 00 00  00 00 00 00 00 1B 00 00  .d...... ........
>  [180] 00 5C 00 5C 00 73 00 74  00 65 00 6E 00 64 00 61  .\.\.s.t .e.n.d.a
>  [190] 00 6C 00 5C 00 50 00 72  00 6F 00 66 00 69 00 6C  .l.\.P.r .o.f.i.l
>  [1A0] 00 65 00 73 00 5C 00 67  00 69 00 65 00 73 00 73  .e.s.\.g .i.e.s.s
>  [1B0] 00 6C 00 65 00 72 00 00  00 12 00 00 00 00 00 00  .l.e.r.. ........
>  [1C0] 00 12 00 00 00 5C 00 5C  00 73 00 74 00 65 00 6E  .....\.\ .s.t.e.n
>  [1D0] 00 64 00 61 00 6C 00 5C  00 67 00 69 00 65 00 73  .d.a.l.\ .g.i.e.s
>  [1E0] 00 73 00 6C 00 65 00 72  00 02 00 00 00 FD 03 00  .s.l.e.r .....ý..
>  [1F0] 00 07 00 00 00 01 02 00  00 07 00 00 00 07 00 00  ........ ........
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_check_hdr(134)
>  rpc_check_hdr: rdata->data_size = 596
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr rpc_hdr   
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 02
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0254
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000004
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 0000023c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0016 cancel_ct : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0017 reserved  : 00
>[2004/12/16 15:17:02, 5] rpc_client/cli_pipe.c:rpc_api_pipe(494)
>  rpc_api_pipe: len left: 0 smbtrans read: 596
>[2004/12/16 15:17:02, 6] rpc_client/cli_pipe.c:rpc_api_pipe(536)
>  rpc_api_pipe: fragment first and last both set
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000018 net_io_r_sam_logon 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0018 buffer_creds: 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00001c smb_io_cred 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          00001c smb_io_chal 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              001c data: e6 e3 2e b0 de f8 97 a0 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_utime 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0024 time: 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0028 switch_value: 0003
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00002c net_io_user_info3 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c ptr_user_info : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000030 smb_io_time logon time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0030 low : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0034 high: 00000000
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000038 smb_io_time logoff time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0038 low : ffffffff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              003c high: 7fffffff
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000040 smb_io_time kickoff time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0040 low : ffffffff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0044 high: 7fffffff
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 smb_io_time last set time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0048 low : 366aeb00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              004c high: 01c4b052
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000050 smb_io_time can change time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0050 low : 366aeb00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0054 high: 01c4b052
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000058 smb_io_time must change time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0058 low : 6419c300
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              005c high: 01c4f3fa
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000060 smb_io_unihdr hdr_user_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0060 uni_str_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0062 uni_max_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0064 buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000068 smb_io_unihdr hdr_full_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0068 uni_str_len: 001c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              006a uni_max_len: 001c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              006c buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000070 smb_io_unihdr hdr_logon_script
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0070 uni_str_len: 0026
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0072 uni_max_len: 0026
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0074 buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000078 smb_io_unihdr hdr_profile_path
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0078 uni_str_len: 0036
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              007a uni_max_len: 0036
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              007c buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000080 smb_io_unihdr hdr_home_dir
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0080 uni_str_len: 0024
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0082 uni_max_len: 0024
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0084 buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000088 smb_io_unihdr hdr_dir_drive
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0088 uni_str_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              008a uni_max_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              008c buffer     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0090 logon_count   : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0092 bad_pw_count  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0094 user_rid      : 000004b6
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0098 group_rid     : 000003fd
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          009c num_groups    : 00000002
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00a0 buffer_groups : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00a4 user_flgs     : 00000020
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          00a8 user_sess_key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0000b8 smb_io_unihdr hdr_logon_srv
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00b8 uni_str_len: 000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00ba uni_max_len: 000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00bc buffer     : 00000001
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0000c0 smb_io_unihdr hdr_logon_dom
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00c0 uni_str_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00c2 uni_max_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c4 buffer     : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00c8 buffer_dom_id : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          00cc padding       : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00f4 num_other_sids: 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00f8 buffer_other_sids: 00000000
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0000fc smb_io_unistr2 uni_user_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00fc uni_max_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0100 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0104 uni_str_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0108 buffer     : g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000118 smb_io_unistr2 uni_full_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0118 uni_max_len: 0000000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              011c offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0120 uni_str_len: 0000000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0124 buffer     : F.r.a.n.k. .G.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000140 smb_io_unistr2 uni_logon_script
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0140 uni_max_len: 00000013
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0144 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0148 uni_str_len: 00000013
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              014c buffer     : s.c.r.i.p.t.s.\.n.t.l.o.g.o.n...c.m.d.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000172 smb_io_unistr2 uni_profile_path
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0174 uni_max_len: 0000001b
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0178 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              017c uni_str_len: 0000001b
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0180 buffer     : \.\.s.t.e.n.d.a.l.\.P.r.o.f.i.l.e.s.\.g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0001b6 smb_io_unistr2 uni_home_dir
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01b8 uni_max_len: 00000012
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01bc offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01c0 uni_str_len: 00000012
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              01c4 buffer     : \.\.s.t.e.n.d.a.l.\.g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0001e8 smb_io_unistr2 - NULL uni_dir_drive
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01e8 num_groups2   : 00000002
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0001ec smb_io_gid 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01ec g_rid: 000003fd
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01f0 attr : 00000007
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0001f4 smb_io_gid 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01f4 g_rid: 00000201
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01f8 attr : 00000007
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          0001fc smb_io_unistr2 uni_logon_srv
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              01fc uni_max_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0200 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0204 uni_str_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0208 buffer     : S.T.E.N.D.A.L.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000216 smb_io_unistr2 uni_logon_dom
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0218 uni_max_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              021c offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0220 uni_str_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>              0224 buffer     : B.I.O.M.A.G.
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000230 smb_io_dom_sid2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0230 num_auths: 00000004
>[2004/12/16 15:17:02, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000234 smb_io_dom_sid sid
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0234 sid_rev_num: 01
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0235 num_auths  : 04
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0236 id_auth[0] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0237 id_auth[1] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0238 id_auth[2] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  0239 id_auth[3] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  023a id_auth[4] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  023b id_auth[5] : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                  023c sub_auths : 00000015 d5b85d7b 3291e4e7 72a90f0f 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      024c auth_resp   : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
>      0250 status      : NT_STATUS_OK
>[2004/12/16 15:17:02, 10] passdb/secrets.c:secrets_named_mutex_release(714)
>  secrets_named_mutex: released mutex for STENDAL
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293)
>  Finding user BIOMAG\giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is biomag\giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is BIOMAG\giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is BIOMAG\GIESSLER
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in biomag\giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [BIOMAG\giessler]!
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293)
>  Finding user giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [giessler]!
>[2004/12/16 15:17:02, 5] auth/auth_util.c:fill_sam_account(965)
>  fill_sam_account: located username was [giessler]
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_username(625)
>  pdb_set_username: setting username giessler, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
>  element 12 -> now SET
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_fullname(706)
>  pdb_set_full_name: setting full name Frank Giessler, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
>  element 13 -> now SET
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(841)
>  pdb_set_unix_homedir: setting home dir /home/stendal/giessler, was NULL
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
>  element 22 -> now SET
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_domain(652)
>  pdb_set_domain: setting domain MOSKAU, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552)
>  pdb_set_user_sid: setting user sid S-1-5-21-3293228863-3396999352-2992300284-1206
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
>  element 18 -> now SET
>[2004/12/16 15:17:02, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-3293228863-3396999352-2992300284-1206 from rid 1206
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588)
>  pdb_set_group_sid: setting group sid S-1-5-21-3293228863-3396999352-2992300284-1021
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_init_flags(525)
>  element 19 -> now SET
>[2004/12/16 15:17:02, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-3293228863-3396999352-2992300284-1021 from rid 1021
>[2004/12/16 15:17:02, 4] lib/substitute.c:automount_server(323)
>  Home server: moskau
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760)
>  pdb_set_profile_path: setting profile path \\moskau\giessler\profile, was 
>[2004/12/16 15:17:02, 4] lib/substitute.c:automount_server(323)
>  Home server: moskau
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_homedir(814)
>  pdb_set_homedir: setting home dir \\moskau\giessler, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733)
>  pdb_set_logon_script: setting logon script , was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_nt_username(679)
>  pdb_set_nt_username: setting nt username giessler, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_username(625)
>  pdb_set_username: setting username giessler, was giessler
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_domain(652)
>  pdb_set_domain: setting domain BIOMAG, was MOSKAU
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_user_sid(552)
>  pdb_set_user_sid: setting user sid S-1-5-21-3585629563-848422119-1923682063-1206
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_group_sid(588)
>  pdb_set_group_sid: setting group sid S-1-5-21-3585629563-848422119-1923682063-1021
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_fullname(706)
>  pdb_set_full_name: setting full name Frank Giessler, was Frank Giessler
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_logon_script(733)
>  pdb_set_logon_script: setting logon script scripts\ntlogon.cmd, was 
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_profile_path(760)
>  pdb_set_profile_path: setting profile path \\stendal\Profiles\giessler, was \\moskau\giessler\profile
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_homedir(814)
>  pdb_set_homedir: setting home dir \\stendal\giessler, was \\moskau\giessler
>[2004/12/16 15:17:02, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(787)
>  pdb_set_dir_drive: setting dir drive , was 
>[2004/12/16 15:17:02, 10] lib/system_smbd.c:sys_getgrouplist(117)
>  sys_getgrouplist: user [giessler]
>[2004/12/16 15:17:02, 10] lib/system_smbd.c:sys_getgrouplist(126)
>  sys_getgrouplist(): disabled winbindd for group lookup [user == giessler]
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 8] lib/util_getent.c:remove_duplicate_gids(330)
>  remove_duplicate_gids: Enter 8 gids
>[2004/12/16 15:17:02, 8] lib/util_getent.c:remove_duplicate_gids(348)
>  remove_duplicate_gids: Exit 7 gids
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 103
>  Primary group is 10 and contains 7 supplementary groups
>  Group[  0]: 10
>  Group[  1]: 14
>  Group[  2]: 40
>  Group[  3]: 100
>  Group[  4]: 300
>  Group[  5]: 400
>  Group[  6]: 700
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (10) -> SID S-1-5-21-3293228863-3396999352-2992300284-1021.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 10 -> S-1-5-21-3293228863-3396999352-2992300284-1021
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (14) -> SID S-1-5-21-3293228863-3396999352-2992300284-1029.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 14 -> S-1-5-21-3293228863-3396999352-2992300284-1029
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 40 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (40) -> SID S-1-5-21-3293228863-3396999352-2992300284-1081.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 40 -> S-1-5-21-3293228863-3396999352-2992300284-1081
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 100 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (100) -> SID S-1-5-21-3293228863-3396999352-2992300284-1201.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 100 -> S-1-5-21-3293228863-3396999352-2992300284-1201
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 300 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (300) -> SID S-1-5-21-3293228863-3396999352-2992300284-1601.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 300 -> S-1-5-21-3293228863-3396999352-2992300284-1601
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 400 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (400) -> SID S-1-5-21-3293228863-3396999352-2992300284-1801.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 400 -> S-1-5-21-3293228863-3396999352-2992300284-1801
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 10] passdb/passdb.c:local_gid_to_sid(1264)
>  local_gid_to_sid: Fall back to algorithmic mapping: 700 -> S-1-0-0
>[2004/12/16 15:17:02, 8] passdb/passdb.c:algorithmic_gid_to_sid(1230)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/12/16 15:17:02, 10] passdb/passdb.c:algorithmic_gid_to_sid(1234)
>  algorithmic_gid_to_sid:  gid (700) -> SID S-1-5-21-3293228863-3396999352-2992300284-2401.
>[2004/12/16 15:17:02, 10] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 700 -> S-1-5-21-3293228863-3396999352-2992300284-2401
>[2004/12/16 15:17:02, 10] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206
>  contains 13 SIDs
>  SID[  0]: S-1-5-21-3585629563-848422119-1923682063-1206
>  SID[  1]: S-1-5-21-3585629563-848422119-1923682063-1021
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-3585629563-848422119-1923682063-513
>  SID[  6]: S-1-5-21-3293228863-3396999352-2992300284-1021
>  SID[  7]: S-1-5-21-3293228863-3396999352-2992300284-1029
>  SID[  8]: S-1-5-21-3293228863-3396999352-2992300284-1081
>  SID[  9]: S-1-5-21-3293228863-3396999352-2992300284-1201
>  SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601
>  SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801
>  SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401
>[2004/12/16 15:17:02, 10] libsmb/samlogon_cache.c:netsamlogon_cache_store(133)
>  netsamlogon_cache_store: SID [S-1-5-21-3585629563-848422119-1923682063-1206]
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>  0000 timestamp: 41c198de
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000004 net_io_user_info3 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0004 ptr_user_info : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 smb_io_time logon time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 low : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c high: 00000000
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000010 smb_io_time logoff time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 low : ffffffff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0014 high: 7fffffff
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 smb_io_time kickoff time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0018 low : ffffffff
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          001c high: 7fffffff
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 smb_io_time last set time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 low : 366aeb00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0024 high: 01c4b052
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 smb_io_time can change time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0028 low : 366aeb00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c high: 01c4b052
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000030 smb_io_time must change time
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 low : 6419c300
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 high: 01c4f3fa
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 smb_io_unihdr hdr_user_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0038 uni_str_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          003a uni_max_len: 0010
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          003c buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000040 smb_io_unihdr hdr_full_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0040 uni_str_len: 001c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0042 uni_max_len: 001c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0044 buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 smb_io_unihdr hdr_logon_script
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0048 uni_str_len: 0026
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          004a uni_max_len: 0026
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          004c buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000050 smb_io_unihdr hdr_profile_path
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0050 uni_str_len: 0036
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0052 uni_max_len: 0036
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0054 buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000058 smb_io_unihdr hdr_home_dir
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0058 uni_str_len: 0024
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          005a uni_max_len: 0024
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          005c buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000060 smb_io_unihdr hdr_dir_drive
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0060 uni_str_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0062 uni_max_len: 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0064 buffer     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0068 logon_count   : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      006a bad_pw_count  : 0000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      006c user_rid      : 000004b6
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0070 group_rid     : 000003fd
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0074 num_groups    : 00000002
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0078 buffer_groups : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      007c user_flgs     : 00000020
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>      0080 user_sess_key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000090 smb_io_unihdr hdr_logon_srv
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0090 uni_str_len: 000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0092 uni_max_len: 000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0094 buffer     : 00000001
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000098 smb_io_unihdr hdr_logon_dom
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0098 uni_str_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          009a uni_max_len: 000c
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          009c buffer     : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      00a0 buffer_dom_id : 00000001
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>      00a4 padding       : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      00cc num_other_sids: 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      00d0 buffer_other_sids: 00000000
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0000d4 smb_io_unistr2 uni_user_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00d4 uni_max_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00d8 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00dc uni_str_len: 00000008
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          00e0 buffer     : g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0000f0 smb_io_unistr2 uni_full_name
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00f0 uni_max_len: 0000000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00f4 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          00f8 uni_str_len: 0000000e
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          00fc buffer     : F.r.a.n.k. .G.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000118 smb_io_unistr2 uni_logon_script
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0118 uni_max_len: 00000013
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          011c offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0120 uni_str_len: 00000013
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0124 buffer     : s.c.r.i.p.t.s.\.n.t.l.o.g.o.n...c.m.d.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00014a smb_io_unistr2 uni_profile_path
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          014c uni_max_len: 0000001b
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0150 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0154 uni_str_len: 0000001b
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0158 buffer     : \.\.s.t.e.n.d.a.l.\.P.r.o.f.i.l.e.s.\.g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00018e smb_io_unistr2 uni_home_dir
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0190 uni_max_len: 00000012
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0194 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0198 uni_str_len: 00000012
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          019c buffer     : \.\.s.t.e.n.d.a.l.\.g.i.e.s.s.l.e.r.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0001c0 smb_io_unistr2 - NULL uni_dir_drive
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      01c0 num_groups2   : 00000002
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0001c4 smb_io_gid 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01c4 g_rid: 000003fd
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01c8 attr : 00000007
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0001cc smb_io_gid 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01cc g_rid: 00000201
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01d0 attr : 00000007
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0001d4 smb_io_unistr2 uni_logon_srv
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01d4 uni_max_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01d8 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01dc uni_str_len: 00000007
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          01e0 buffer     : S.T.E.N.D.A.L.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      0001ee smb_io_unistr2 uni_logon_dom
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01f0 uni_max_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01f4 offset     : 00000000
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          01f8 uni_str_len: 00000006
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          01fc buffer     : B.I.O.M.A.G.
>[2004/12/16 15:17:02, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000208 smb_io_dom_sid2 
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0208 num_auths: 00000004
>[2004/12/16 15:17:02, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          00020c smb_io_dom_sid sid
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              020c sid_rev_num: 01
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              020d num_auths  : 04
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              020e id_auth[0] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              020f id_auth[1] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              0210 id_auth[2] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              0211 id_auth[3] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              0212 id_auth[4] : 00
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>              0213 id_auth[5] : 05
>[2004/12/16 15:17:02, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>              0214 sub_auths : 00000015 d5b85d7b 3291e4e7 72a90f0f 
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,45)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,45) wrote 45
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 35
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=10
>  smt_wct=0
>  smb_bcc=0
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,43)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,43) wrote 43
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 39
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=0
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=11
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(20,39)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(20,39) wrote 39
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 35
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=1
>  smb_tid=1
>  smb_pid=3628
>  smb_uid=100
>  smb_mid=12
>  smt_wct=0
>  smb_bcc=0
>[2004/12/16 15:17:02, 3] auth/auth.c:check_ntlm_password(268)
>  check_ntlm_password: ntdomain authentication for user [GIESSLER] succeeded
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth.c:check_ntlm_password(292)
>  check_ntlm_password:  PAM Account for user [giessler] succeeded
>[2004/12/16 15:17:02, 2] auth/auth.c:check_ntlm_password(305)
>  check_ntlm_password:  authentication for user [GIESSLER] -> [GIESSLER] -> [giessler] succeeded
>[2004/12/16 15:17:02, 5] auth/auth_util.c:free_user_info(1318)
>  attempting to free (and zero) a user_info structure
>[2004/12/16 15:17:02, 10] auth/auth_util.c:free_user_info(1321)
>  structure was created for GIESSLER
>[2004/12/16 15:17:02, 10] smbd/password.c:register_vuid(158)
>  register_vuid: allocated vuid = 100
>[2004/12/16 15:17:02, 10] smbd/password.c:register_vuid(220)
>  register_vuid: (103,10) giessler GIESSLER BIOMAG guest=0
>[2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(222)
>  User name: giessler	Real name: Frank Giessler
>[2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(241)
>  UNIX uid 103 is UNIX user giessler, and will be vuid 100
>[2004/12/16 15:17:02, 2] smbd/utmp.c:sys_utmp_update(419)
>  utmp_update: uname:/var/adm/utmpx wname:/var/adm/wtmpx
>[2004/12/16 15:17:02, 7] param/loadparm.c:lp_servicenumber(4043)
>  lp_servicenumber: couldn't find giessler
>[2004/12/16 15:17:02, 3] smbd/password.c:register_vuid(270)
>  Adding homes service for user 'giessler' using home directory: '/home/stendal/giessler'
>[2004/12/16 15:17:02, 7] param/loadparm.c:lp_servicenumber(4043)
>  lp_servicenumber: couldn't find homes
>[2004/12/16 15:17:02, 6] param/loadparm.c:lp_file_list_changed(2686)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf.%m -> /usr/local/samba/lib/smb.conf.gera  last mod_time: Thu Jan  1 01:00:00 1970
>  
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Thu Dec 16 14:11:35 2004
>  
>[2004/12/16 15:17:02, 3] smbd/process.c:chain_reply(1232)
>  Chained message
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=157
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=10
>  smb_flg2=3
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37073
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  157 (0x9D)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=19
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 5C 5C 4D 4F 53 4B 41  55 5C 49 50 43 24 00 49  .\\MOSKA U\IPC$.I
>  [010] 50 43 00                                          PC. 
>[2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 3628) conn 0x0
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:02, 4] smbd/reply.c:reply_tcon_and_X(408)
>  Client requested device type [IPC] for share [IPC$]
>[2004/12/16 15:17:02, 5] smbd/service.c:make_connection(813)
>  making a connection to 'normal' service ipc$
>[2004/12/16 15:17:02, 3] lib/access.c:only_ipaddrs_in_list(291)
>  only_ipaddrs_in_list: list has non-ip address (@biomag)
>[2004/12/16 15:17:02, 3] lib/access.c:check_access(316)
>  check_access: hostnames in host allow/deny list.
>[2004/12/16 15:17:02, 5] lib/access.c:string_match(100)
>  looking for 141.35.200.71 of domain hippo.biomag.uni-jena.de in netgroup biomag gave No
>[2004/12/16 15:17:02, 5] lib/access.c:string_match(100)
>  looking for gera of domain hippo.biomag.uni-jena.de in netgroup biomag gave Yes
>[2004/12/16 15:17:02, 2] lib/access.c:check_access(324)
>  Allowed connection from gera (141.35.200.71)
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam(293)
>  Finding user giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is giessler
>[2004/12/16 15:17:02, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [giessler]!
>[2004/12/16 15:17:02, 3] smbd/service.c:make_connection_snum(472)
>  Connect path is '/tmp' for service [IPC$]
>[2004/12/16 15:17:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 13 entries and first sid S-1-5-21-3585629563-848422119-1923682063-1206.
>[2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(251)
>[2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-3585629563-848422119-1923682063-1206
>  se_access_check: also S-1-5-21-3585629563-848422119-1923682063-1021
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-3585629563-848422119-1923682063-513
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1021
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1029
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1081
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1201
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1601
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1801
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-2401
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2004/12/16 15:17:02, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2004/12/16 15:17:02, 3] smbd/vfs.c:vfs_init_default(203)
>  Initialising default vfs hooks
>[2004/12/16 15:17:02, 5] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2004/12/16 15:17:02, 10] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user giessler
>[2004/12/16 15:17:02, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/12/16 15:17:02, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 13 entries and first sid S-1-5-21-3585629563-848422119-1923682063-1206.
>[2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(251)
>[2004/12/16 15:17:02, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-3585629563-848422119-1923682063-1206
>  se_access_check: also S-1-5-21-3585629563-848422119-1923682063-1021
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-3585629563-848422119-1923682063-513
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1021
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1029
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1081
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1201
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1601
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-1801
>  se_access_check: also S-1-5-21-3293228863-3396999352-2992300284-2401
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2004/12/16 15:17:02, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (103, 10) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206
>  contains 13 SIDs
>  SID[  0]: S-1-5-21-3585629563-848422119-1923682063-1206
>  SID[  1]: S-1-5-21-3585629563-848422119-1923682063-1021
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-3585629563-848422119-1923682063-513
>  SID[  6]: S-1-5-21-3293228863-3396999352-2992300284-1021
>  SID[  7]: S-1-5-21-3293228863-3396999352-2992300284-1029
>  SID[  8]: S-1-5-21-3293228863-3396999352-2992300284-1081
>  SID[  9]: S-1-5-21-3293228863-3396999352-2992300284-1201
>  SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601
>  SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801
>  SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 103
>  Primary group is 10 and contains 7 supplementary groups
>  Group[  0]: 10
>  Group[  1]: 14
>  Group[  2]: 40
>  Group[  3]: 100
>  Group[  4]: 300
>  Group[  5]: 400
>  Group[  6]: 700
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,103) gid=(0,10)
>[2004/12/16 15:17:02, 3] smbd/service.c:make_connection_snum(648)
>  gera (141.35.200.71) connect to service IPC$ initially as user giessler (uid=103, gid=10) (pid 3628)
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:02, 3] smbd/reply.c:reply_tcon_and_X(456)
>  tconX service=IPC$ 
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=55
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=16385
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37073
>  smt_wct=3
>  smb_vwv[ 0]=  117 (0x75)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_bcc=0
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(24,59)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(24,59) wrote 59
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 95
>[2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x5f
>[2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091)
>  Transaction 3 of length 99
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=95
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=3
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37138
>  smt_wct=14
>  smb_vwv[ 0]=   19 (0x13)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 5000 (0x1388)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   19 (0x13)
>  smb_vwv[10]=   76 (0x4C)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=32
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 4C 41  4E 4D 41 4E 00 00 00 57  \PIPE\LA NMAN...W
>  [010] 72 4C 65 68 00 42 31 33  42 57 7A 00 01 00 FF FF  rLeh.B13 BWz...ÿÿ
>[2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 3628) conn 0x2f08c8
>[2004/12/16 15:17:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (103, 10) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-3585629563-848422119-1923682063-1206
>  contains 13 SIDs
>  SID[  0]: S-1-5-21-3585629563-848422119-1923682063-1206
>  SID[  1]: S-1-5-21-3585629563-848422119-1923682063-1021
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-3585629563-848422119-1923682063-513
>  SID[  6]: S-1-5-21-3293228863-3396999352-2992300284-1021
>  SID[  7]: S-1-5-21-3293228863-3396999352-2992300284-1029
>  SID[  8]: S-1-5-21-3293228863-3396999352-2992300284-1081
>  SID[  9]: S-1-5-21-3293228863-3396999352-2992300284-1201
>  SID[ 10]: S-1-5-21-3293228863-3396999352-2992300284-1601
>  SID[ 11]: S-1-5-21-3293228863-3396999352-2992300284-1801
>  SID[ 12]: S-1-5-21-3293228863-3396999352-2992300284-2401
>[2004/12/16 15:17:02, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 103
>  Primary group is 10 and contains 7 supplementary groups
>  Group[  0]: 10
>  Group[  1]: 14
>  Group[  2]: 40
>  Group[  3]: 100
>  Group[  4]: 300
>  Group[  5]: 400
>  Group[  6]: 700
>[2004/12/16 15:17:02, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(0,103) gid=(0,10)
>[2004/12/16 15:17:02, 4] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /tmp
>[2004/12/16 15:17:02, 3] smbd/ipc.c:reply_trans(538)
>  trans <\PIPE\LANMAN> data=0 params=19 setup=0
>[2004/12/16 15:17:02, 5] smbd/ipc.c:reply_trans(557)
>  calling named_pipe
>[2004/12/16 15:17:02, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <LANMAN> name
>[2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3579)
>  Got API command 0 of form <WrLeh> <B13BWz> (tdscnt=0,tpscnt=19,mdrcnt=65535,mprcnt=8)
>[2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3583)
>  Doing RNetShareEnum
>[2004/12/16 15:17:02, 3] smbd/lanman.c:api_RNetShareEnum(1551)
>  RNetShareEnum gave 3 entries of 3 (1 65535 148 65535)
>[2004/12/16 15:17:02, 5] smbd/ipc.c:copy_trans_params_and_data(62)
>  copy_trans_params_and_data: params[0..8] data[0..148]
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=212
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=16385
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37138
>  smt_wct=10
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=  148 (0x94)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  148 (0x94)
>  smb_vwv[ 7]=   64 (0x40)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=157
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 00 00 00 00 03 00 03  00 54 65 73 74 73 68 61  ........ .Testsha
>  [010] 72 65 00 00 00 00 00 00  00 3C 00 00 00 49 50 43  re...... .<...IPC
>  [020] 24 00 00 00 00 00 00 00  00 00 00 03 00 4C 00 00  $....... .....L..
>  [030] 00 41 44 4D 49 4E 24 00  00 00 00 00 00 00 00 03  .ADMIN$. ........
>  [040] 00 70 00 00 00 54 65 73  74 76 65 72 7A 65 69 63  .p...Tes tverzeic
>  [050] 68 6E 69 73 00 49 50 43  20 53 65 72 76 69 63 65  hnis.IPC  Service
>  [060] 20 28 6D 6F 73 6B 61 75  20 28 53 61 6D 62 61 20   (moskau  (Samba 
>  [070] 33 2E 30 2E 31 30 29 29  00 49 50 43 20 53 65 72  3.0.10)) .IPC Ser
>  [080] 76 69 63 65 20 28 6D 6F  73 6B 61 75 20 28 53 61  vice (mo skau (Sa
>  [090] 6D 62 61 20 33 2E 30 2E  31 30 29 29 00           mba 3.0. 10)).
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(24,216)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(24,216) wrote 216
>[2004/12/16 15:17:02, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 95
>[2004/12/16 15:17:02, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x5f
>[2004/12/16 15:17:02, 3] smbd/process.c:process_smb(1091)
>  Transaction 4 of length 99
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=95
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=3
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37203
>  smt_wct=14
>  smb_vwv[ 0]=   19 (0x13)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    6 (0x6)
>  smb_vwv[ 3]=32767 (0x7FFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 5000 (0x1388)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   19 (0x13)
>  smb_vwv[10]=   76 (0x4C)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=32
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 5C 50 49 50 45 5C 4C 41  4E 4D 41 4E 00 0D 00 57  \PIPE\LA NMAN...W
>  [010] 72 4C 68 00 42 31 36 42  42 44 7A 00 01 00 FF 7F  rLh.B16B BDz...ÿ.
>[2004/12/16 15:17:02, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 3628) conn 0x2f08c8
>[2004/12/16 15:17:02, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2004/12/16 15:17:02, 3] smbd/ipc.c:reply_trans(538)
>  trans <\PIPE\LANMAN> data=0 params=19 setup=0
>[2004/12/16 15:17:02, 5] smbd/ipc.c:reply_trans(557)
>  calling named_pipe
>[2004/12/16 15:17:02, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <LANMAN> name
>[2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3579)
>  Got API command 13 of form <WrLh> <B16BBDz> (tdscnt=0,tpscnt=19,mdrcnt=32767,mprcnt=6)
>[2004/12/16 15:17:02, 3] smbd/lanman.c:api_reply(3583)
>  Doing RNetServerGetInfo
>[2004/12/16 15:17:02, 4] smbd/lanman.c:api_RNetServerGetInfo(2334)
>  NetServerGetInfo level 1
>[2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(984)
>  Servertype search: 3fffffff
>[2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(1038)
>  s: dom mismatch               BIOMAG 80001000                                    BIOMAG
>[2004/12/16 15:17:02, 4] smbd/lanman.c:get_server_info(1053)
>  **SV**               MOSKAU    19b23     moskau (Samba 3.0.10)          BIOMAG
>[2004/12/16 15:17:02, 5] smbd/ipc.c:copy_trans_params_and_data(62)
>  copy_trans_params_and_data: params[0..6] data[0..48]
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(464)
>[2004/12/16 15:17:02, 5] lib/util.c:show_msg(474)
>  size=112
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=16385
>  smb_tid=1
>  smb_pid=132
>  smb_uid=100
>  smb_mid=37203
>  smt_wct=10
>  smb_vwv[ 0]=    6 (0x6)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    6 (0x6)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   64 (0x40)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=57
>[2004/12/16 15:17:02, 10] lib/util.c:dump_data(1977)
>  [000] 00 00 00 00 00 30 00 00  00 4D 4F 53 4B 41 55 00  .....0.. .MOSKAU.
>  [010] 00 00 00 00 00 00 00 00  00 04 09 23 9B 01 00 1A  ........ ...#....
>  [020] 00 00 00 6D 6F 73 6B 61  75 20 28 53 61 6D 62 61  ...moska u (Samba
>  [030] 20 33 2E 30 2E 31 30 29  00                        3.0.10) .
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(449)
>  write_socket(24,116)
>[2004/12/16 15:17:02, 6] lib/util_sock.c:write_socket(452)
>  write_socket(24,116) wrote 116
>[2004/12/16 15:17:05, 10] smbd/process.c:async_processing(281)
>  async_processing: Doing async processing.
>[2004/12/16 15:17:05, 5] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:05, 2] smbd/server.c:exit_server(571)
>  Closing connections
>[2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:05, 3] smbd/service.c:close_cnum(836)
>  gera (141.35.200.71) closed connection to service IPC$
>[2004/12/16 15:17:05, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2004/12/16 15:17:05, 4] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /
>[2004/12/16 15:17:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/12/16 15:17:05, 5] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/12/16 15:17:05, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/12/16 15:17:05, 2] smbd/utmp.c:sys_utmp_update(419)
>  utmp_update: uname:/var/adm/utmpx wname:/var/adm/wtmpx
>[2004/12/16 15:17:05, 5] auth/auth_util.c:free_server_info(1344)
>  attempting to free (and zero) a server_info structure
>[2004/12/16 15:17:05, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2004/12/16 15:17:05, 5] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/12/16 15:17:05, 3] smbd/server.c:exit_server(614)
>  Server exit (Caught TERM signal)

Actions: View

Attachments on bug 2165: 846 | 847 | 848