[090] 00 73 00 6E 00 62 00 2D 00 66 00 74 00 6F 00 6E .s.n.b.- .f.t.o.n [0A0] 00 2D 00 61 00 64 00 31 00 2E 00 73 00 6E 00 62 .-.a.d.1 ...s.n.b [0B0] 00 2E 00 63 00 61 00 00 00 00 00 A3 81 9D 04 81 ...c.a.. ........ [0C0] 9A 4E 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 .NTLMSSP ........ [0D0] 00 30 00 00 00 05 02 89 20 36 77 31 7D 92 90 FE .0...... 6w1}... [0E0] B1 00 00 00 00 00 00 00 00 64 00 64 00 36 00 00 ........ .d.d.6.. [0F0] 00 53 00 4E 00 42 00 02 00 06 00 53 00 4E 00 42 .S.N.B.. ...S.N.B [100] 00 01 00 18 00 53 00 4E 00 42 00 2D 00 46 00 54 .....S.N .B.-.F.T [110] 00 4F 00 4E 00 2D 00 41 00 44 00 31 00 04 00 0C .O.N.-.A .D.1.... [120] 00 73 00 6E 00 62 00 2E 00 63 00 61 00 03 00 26 .s.n.b.. .c.a...& [130] 00 73 00 6E 00 62 00 2D 00 66 00 74 00 6F 00 6E .s.n.b.- .f.t.o.n [140] 00 2D 00 61 00 64 00 31 00 2E 00 73 00 6E 00 62 .-.a.d.1 ...s.n.b [150] 00 2E 00 63 00 61 00 00 00 00 00 57 00 69 00 6E ...c.a.. ...W.i.n [160] 00 64 00 6F 00 77 00 73 00 20 00 35 00 2E 00 30 .d.o.w.s . .5...0 [170] 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ...W.i.n .d.o.w.s [180] 00 20 00 32 00 30 00 30 00 30 00 20 00 4C 00 41 . .2.0.0 .0. .L.A [190] 00 4E 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 .N. .M.a .n.a.g.e [1A0] 00 72 00 00 00 .r... [2003/08/20 11:29:11, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(486) Got challenge flags: [2003/08/20 11:29:11, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(39) Got NTLMSSP neg_flags=0x20890205 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_CHAL_TARGET_INFO NTLMSSP_NEGOTIATE_128 [2003/08/20 11:29:11, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(529) NTLMSSP: Set final flags: [2003/08/20 11:29:11, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(39) Got NTLMSSP neg_flags=0x20080205 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,184) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,184) wrote 184 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 126 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=126 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17873 smb_uid=6144 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 126 (0x7E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=83 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [010] 00 6F 00 77 00 73 00 20 00 35 00 2E 00 30 00 00 .o.w.s. .5...0.. [020] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [030] 00 32 00 30 00 30 00 30 00 20 00 4C 00 41 00 4E .2.0.0.0 . .L.A.N [040] 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 00 72 . .M.a.n .a.g.e.r [050] 00 00 00 ... [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=126 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17873 smb_uid=6144 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 126 (0x7E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=83 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [010] 00 6F 00 77 00 73 00 20 00 35 00 2E 00 30 00 00 .o.w.s. .5...0.. [020] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [030] 00 32 00 30 00 30 00 30 00 20 00 4C 00 41 00 4E .2.0.0.0 . .L.A.N [040] 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 00 72 . .M.a.n .a.g.e.r [050] 00 00 00 ... [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,92) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,92) wrote 92 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 48 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=4 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 49 50 43 00 00 00 00 IPC.... [2003/08/20 11:29:11, 10] libsmb/clientgen.c:cli_init_creds(212) cli_init_creds: user domain [2003/08/20 11:29:11, 10] passdb/secrets.c:secrets_named_mutex_release(709) secrets_named_mutex: released mutex for SNB-FTON-AD1 [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,108) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,108) wrote 108 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 103 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=5 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 3328 (0xD00) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) Bind RPC Pipe[400d]: \PIPE\NETLOGON [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) Bind Abstract Syntax: [000] 12 34 56 78 12 34 AB CD EF 00 01 23 45 67 CF FB .4Vx.4.. ...#Eg.. [010] 00 00 00 01 .... [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` [010] 00 00 00 02 .... [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0b [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0048 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015b [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_rb [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_bba [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 num_elements: 00000001 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 001c context_id : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 001e num_syntaxes: 01 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 00001f smb_io_rpc_iface [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 data : 12345678 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 data : 1234 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0026 data : abcd [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0028 data : ef 00 01 23 45 67 cf fb [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 version: 00000001 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000034 smb_io_rpc_iface [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 data : 8a885d04 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 data : 1ceb [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a data : 11c9 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003c data : 9f e8 08 00 2b 10 48 60 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 version: 00000002 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:400d [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16397 (0x400D) smb_bcc=87 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 5B 01 00 00 B8 .......H ...[.... [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,158) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,158) wrote 158 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 124 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 5B 01 00 ........ .D...[.. [010] 00 B8 10 B8 10 33 88 0C 00 0C 00 5C 50 49 50 45 .....3.. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 5B 01 00 ........ .D...[.. [010] 00 B8 10 B8 10 33 88 0C 00 0C 00 5C 50 49 50 45 .....3.. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 68 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0c [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0044 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015b [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 68 [2003/08/20 11:29:11, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520) rpc_api_pipe: fragment first and last both set [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1375) rpc_pipe_bind: rpc_api_pipe returned OK. [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_ba [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_bba [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 000c8833 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000018 smb_io_rpc_addr_str [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0018 len: 000c [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 001a str: \PIPE\lsass. [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000026 smb_io_rpc_results [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0028 num_results: 01 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002c result : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 002e reason : 0000 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000030 smb_io_rpc_iface [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 data : 8a885d04 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0034 data : 1ceb [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0036 data : 11c9 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0038 data : 9f e8 08 00 2b 10 48 60 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0040 version: 00000002 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:check_bind_response(1244) bind_rpc_pipe: server pipe_name found: \PIPE\lsass [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:check_bind_response(1264) bind_rpc_pipe: accepted! [2003/08/20 11:29:11, 10] passdb/secrets.c:secrets_named_mutex(697) secrets_named_mutex: got mutex for NETLOGON\SNB-FTON-AD1 [2003/08/20 11:29:11, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45) cli_net_req_chal: LSA Request Challenge from SNB-FTON-DBS8 to SNB-FTON-AD1: A1BE4DD67165BB6C [2003/08/20 11:29:11, 5] rpc_parse/parse_net.c:init_q_req_chal(538) init_q_req_chal: 538 [2003/08/20 11:29:11, 5] rpc_parse/parse_net.c:init_q_req_chal(547) init_q_req_chal: 547 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 net_io_q_req_chal [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 undoc_buffer: 00000001 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000004 smb_io_unistr2 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 uni_max_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 undoc : 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c uni_str_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0010 buffer : \.\.S.N.B.-.F.T.O.N.-.A.D.1... [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 00002e smb_io_unistr2 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 uni_max_len: 0000000e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 undoc : 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0038 uni_str_len: 0000000e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 003c buffer : S.N.B.-.F.T.O.N.-.D.B.S.8... [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000058 smb_io_chal [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0058 data: a1 be 4d d6 71 65 bb 6c [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0x4 data_len: 0x78 [2003/08/20 11:29:11, 10] rpc_client/cli_pipe.c:create_rpc_request(861) create_rpc_request: data_len: 78 auth_len: 0 alloc_hint: 68 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0078 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015c [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000068 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 0004 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:400d [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=202 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 120 (0x78) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 120 (0x78) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16397 (0x400D) smb_bcc=135 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 78 00 00 00 5C 01 00 00 68 .......x ...\...h [020] 00 00 00 00 00 04 00 01 00 00 00 0F 00 00 00 00 ........ ........ [030] 00 00 00 0F 00 00 00 5C 00 5C 00 53 00 4E 00 42 .......\ .\.S.N.B [040] 00 2D 00 46 00 54 00 4F 00 4E 00 2D 00 41 00 44 .-.F.T.O .N.-.A.D [050] 00 31 00 00 00 00 00 0E 00 00 00 00 00 00 00 0E .1...... ........ [060] 00 00 00 53 00 4E 00 42 00 2D 00 46 00 54 00 4F ...S.N.B .-.F.T.O [070] 00 4E 00 2D 00 44 00 42 00 53 00 38 00 00 00 A1 .N.-.D.B .S.8.... [080] BE 4D D6 71 65 BB 6C .M.qe.l [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,206) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,206) wrote 206 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 92 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 5C 01 00 ........ .$...\.. [010] 00 0C 00 00 00 00 00 00 00 68 24 14 EC D6 43 DA ........ .h$...C. [020] 1B 00 00 00 00 ..... [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 5C 01 00 ........ .$...\.. [010] 00 0C 00 00 00 00 00 00 00 68 24 14 EC D6 43 DA ........ .h$...C. [020] 1B 00 00 00 00 ..... [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 36 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0024 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015c [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 0000000c [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 36 [2003/08/20 11:29:11, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520) rpc_api_pipe: fragment first and last both set [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 net_io_r_req_chal [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000018 smb_io_chal [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0018 data: 68 24 14 ec d6 43 da 1b [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0020 status: NT_STATUS_OK [2003/08/20 11:29:11, 4] libsmb/credentials.c:cred_session_key(59) cred_session_key [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_session_key(61) clnt_chal: A1BE4DD67165BB6C [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_session_key(62) srv_chal : 682414ECD643DA1B [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_session_key(63) clnt+srv : 09E361C247A99588 [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_session_key(64) sess_key : E46551FABC5AF21F [2003/08/20 11:29:11, 4] libsmb/credentials.c:cred_create(90) cred_create [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(92) sess_key : E46551FABC5AF21F [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(93) stor_cred: A1BE4DD67165BB6C [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(95) timecred : A1BE4DD67165BB6C [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(96) calc_cred: ACF3CB350DCB3865 [2003/08/20 11:29:11, 4] rpc_client/cli_netlogon.c:cli_net_auth2(102) cli_net_auth2: srv:\\SNB-FTON-AD1 acct:SNB-FTON-DBS8$ sc:2 mc: SNB-FTON-DBS8 chal ACF3CB350DCB3865 neg: 400001ff [2003/08/20 11:29:11, 5] rpc_parse/parse_net.c:init_q_auth_2(659) init_q_auth_2: 659 [2003/08/20 11:29:11, 5] rpc_parse/parse_misc.c:init_log_info(1283) make_log_info 1283 [2003/08/20 11:29:11, 5] rpc_parse/parse_net.c:init_q_auth_2(665) init_q_auth_2: 665 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 net_io_q_auth_2 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_log_info [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0000 undoc_buffer: 00000001 [2003/08/20 11:29:11, 7] rpc_parse/parse_prs.c:prs_debug(81) 000004 smb_io_unistr2 unistr2 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 uni_max_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 undoc : 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c uni_str_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0010 buffer : \.\.S.N.B.-.F.T.O.N.-.A.D.1... [2003/08/20 11:29:11, 7] rpc_parse/parse_prs.c:prs_debug(81) 00002e smb_io_unistr2 unistr2 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 uni_max_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 undoc : 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0038 uni_str_len: 0000000f [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 003c buffer : S.N.B.-.F.T.O.N.-.D.B.S.8.$... [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 005a sec_chan: 0002 [2003/08/20 11:29:11, 7] rpc_parse/parse_prs.c:prs_debug(81) 00005c smb_io_unistr2 unistr2 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 005c uni_max_len: 0000000e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0060 undoc : 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0064 uni_str_len: 0000000e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806) 0068 buffer : S.N.B.-.F.T.O.N.-.D.B.S.8... [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000084 smb_io_chal [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0084 data: ac f3 cb 35 0d cb 38 65 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 00008c net_io_neg_flags [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 008c neg_flags: 400001ff [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:create_rpc_request(844) create_rpc_request: opnum: 0xf data_len: 0xa8 [2003/08/20 11:29:11, 10] rpc_client/cli_pipe.c:create_rpc_request(861) create_rpc_request: data_len: a8 auth_len: 0 alloc_hint: 98 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 00a8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015d [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_req hdr_req [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000098 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0016 opnum : 000f [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:400d [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=250 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=8 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 168 (0xA8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 168 (0xA8) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16397 (0x400D) smb_bcc=183 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 A8 00 00 00 5D 01 00 00 98 ........ ...].... [020] 00 00 00 00 00 0F 00 01 00 00 00 0F 00 00 00 00 ........ ........ [030] 00 00 00 0F 00 00 00 5C 00 5C 00 53 00 4E 00 42 .......\ .\.S.N.B [040] 00 2D 00 46 00 54 00 4F 00 4E 00 2D 00 41 00 44 .-.F.T.O .N.-.A.D [050] 00 31 00 00 00 00 00 0F 00 00 00 00 00 00 00 0F .1...... ........ [060] 00 00 00 53 00 4E 00 42 00 2D 00 46 00 54 00 4F ...S.N.B .-.F.T.O [070] 00 4E 00 2D 00 44 00 42 00 53 00 38 00 24 00 00 .N.-.D.B .S.8.$.. [080] 00 02 00 0E 00 00 00 00 00 00 00 0E 00 00 00 53 ........ .......S [090] 00 4E 00 42 00 2D 00 46 00 54 00 4F 00 4E 00 2D .N.B.-.F .T.O.N.- [0A0] 00 44 00 42 00 53 00 38 00 00 00 AC F3 CB 35 0D .D.B.S.8 ......5. [0B0] CB 38 65 FF 01 00 40 .8e...@ [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,254) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,254) wrote 254 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 96 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=8 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 5D 01 00 ........ .(...].. [010] 00 10 00 00 00 00 00 00 00 04 54 F7 42 FC 86 14 ........ ..T.B... [020] 6D FF 01 00 40 00 00 00 00 m...@... . [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=8 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 5D 01 00 ........ .(...].. [010] 00 10 00 00 00 00 00 00 00 04 54 F7 42 FC 86 14 ........ ..T.B... [020] 6D FF 01 00 40 00 00 00 00 m...@... . [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 40 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 02 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0028 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015d [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0010 alloc_hint: 00000010 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0014 context_id: 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0016 cancel_ct : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0017 reserved : 00 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478) rpc_api_pipe: len left: 0 smbtrans read: 40 [2003/08/20 11:29:11, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520) rpc_api_pipe: fragment first and last both set [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000018 net_io_r_auth_2 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000018 smb_io_chal [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0018 data: 04 54 f7 42 fc 86 14 6d [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000020 net_io_neg_flags [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 neg_flags: 400001ff [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_ntstatus(664) 0024 status: NT_STATUS_OK [2003/08/20 11:29:11, 4] libsmb/credentials.c:cred_create(90) cred_create [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(92) sess_key : E46551FABC5AF21F [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(93) stor_cred: 682414ECD643DA1B [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(94) timestamp: 0 [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(95) timecred : 682414ECD643DA1B [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_create(96) calc_cred: 0454F742FC86146D [2003/08/20 11:29:11, 4] libsmb/credentials.c:cred_assert(121) cred_assert [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_assert(123) challenge : 0454F742FC86146D [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_assert(124) calculated: 0454F742FC86146D [2003/08/20 11:29:11, 5] libsmb/credentials.c:cred_assert(128) credentials check ok [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,108) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,108) wrote 108 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 103 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=9 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1310) Bind RPC Pipe[400e]: \PIPE\NETLOGON [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:valid_pipe_name(1211) Bind Abstract Syntax: [000] 12 34 56 78 12 34 AB CD EF 00 01 23 45 67 CF FB .4Vx.4.. ...#Eg.. [010] 00 00 00 01 .... [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:valid_pipe_name(1214) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` [010] 00 00 00 02 .... [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr_auth hdr_auth [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 auth_type : 44 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 auth_level : 06 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 padding : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 reserved : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0004 auth_context : 00000001 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000008 smb_io_rpc_auth_netsec_neg netsec_neg [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0008 type1: 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c type2: 00000003 [2003/08/20 11:29:11, 6] lib/util.c:dump_data(1887) [000] 4D 59 47 52 4F 55 50 MYGROUP [2003/08/20 11:29:11, 6] lib/util.c:dump_data(1887) [000] 53 4E 42 2D 46 54 4F 4E 2D 44 42 53 38 SNB-FTON -DBS8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0b [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 006e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 001e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015e [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_rb [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000010 smb_io_rpc_hdr_bba [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0010 max_tsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0012 max_rsize: 10b8 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0014 assoc_gid: 00000000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0018 num_elements: 00000001 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 001c context_id : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 001e num_syntaxes: 01 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 00001f smb_io_rpc_iface [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0020 data : 12345678 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0024 data : 1234 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0026 data : abcd [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 0028 data : ef 00 01 23 45 67 cf fb [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0030 version: 00000001 [2003/08/20 11:29:11, 6] rpc_parse/parse_prs.c:prs_debug(81) 000034 smb_io_rpc_iface [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0034 data : 8a885d04 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0038 data : 1ceb [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 003a data : 11c9 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8s(721) 003c data : 9f e8 08 00 2b 10 48 60 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 0044 version: 00000002 [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_api_pipe(405) rpc_api_pipe: fnum:400e [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=192 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 110 (0x6E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 110 (0x6E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16398 (0x400E) smb_bcc=125 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 6E 00 1E 00 5E 01 00 00 B8 .......n ...^.... [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ [060] 00 00 00 03 00 00 00 4D 59 47 52 4F 55 50 00 53 .......M YGROUP.S [070] 4E 42 2D 46 54 4F 4E 2D 44 42 53 38 00 NB-FTON- DBS8. [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,196) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,196) wrote 196 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 80 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=80 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 0D 03 10 00 00 00 18 00 00 00 5E 01 00 ........ .....^.. [010] 00 09 00 01 05 00 00 00 00 ........ . [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=80 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=25 [2003/08/20 11:29:11, 10] lib/util.c:dump_data(1887) [000] 00 05 00 0D 03 10 00 00 00 18 00 00 00 5E 01 00 ........ .....^.. [010] 00 09 00 01 05 00 00 00 00 ........ . [2003/08/20 11:29:11, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132) rpc_check_hdr: rdata->data_size = 24 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_debug(81) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0000 major : 05 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0001 minor : 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0002 pkt_type : 0d [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0003 flags : 03 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0004 pack_type0: 10 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0005 pack_type1: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0006 pack_type2: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint8(576) 0007 pack_type3: 00 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 0008 frag_len : 0018 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint16(605) 000a auth_len : 0000 [2003/08/20 11:29:11, 5] rpc_parse/parse_prs.c:prs_uint32(634) 000c call_id : 0000015e [2003/08/20 11:29:11, 3] rpc_client/cli_pipe.c:rpc_api_pipe(457) Bind NACK received on pipe 400e! [2003/08/20 11:29:11, 2] rpc_client/cli_pipe.c:cli_nt_establish_netlogon(1576) rpc bind to \PIPE\NETLOGON failed [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,45) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,45) wrote 45 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 35 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=11 smt_wct=0 smb_bcc=0 [2003/08/20 11:29:11, 10] passdb/secrets.c:secrets_named_mutex_release(709) secrets_named_mutex: released mutex for NETLOGON\SNB-FTON-AD1 [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,45) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,45) wrote 45 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 35 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=8 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=12 smt_wct=0 smb_bcc=0 [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(407) write_socket(19,45) [2003/08/20 11:29:11, 6] lib/util_sock.c:write_socket(410) write_socket(19,45) wrote 45 [2003/08/20 11:29:11, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 35 [2003/08/20 11:29:11, 5] lib/util.c:show_msg(456) [2003/08/20 11:29:11, 5] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=4097 smb_pid=17873 smb_uid=6144 smb_mid=13 smt_wct=0 smb_bcc=0 [2003/08/20 11:29:11, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(309) could not open handle to NETLOGON pipe (error: NT_STATUS_UNSUCCESSFUL) [2003/08/20 11:29:11, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(377) NTLM CRAP authentication for user [MYGROUP]\[xbking] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 4) [2003/08/20 11:29:11, 10] nsswitch/winbindd.c:client_write(502) client_write: wrote 1300 bytes. [2003/08/20 11:29:16, 10] lib/messages.c:message_dispatch(433) message_dispatch: received_signal = 1 [2003/08/20 11:29:16, 10] lib/messages.c:message_dispatch(442) message_dispatch: received msg_type=1 src_pid=28392 [2003/08/20 11:29:16, 10] lib/messages.c:message_dispatch(446) message_dispatch: processing message of type 1. [2003/08/20 11:29:16, 3] lib/debug.c:debug_message(454) INFO: Remote set of debug to `0' (pid 17873 from pid 28392)