lib/debug.c:debug_dump_status(366) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 param/loadparm.c:lp_load(3915) lp_load: refreshing parameters param/loadparm.c:init_globals(1314) Initialising global parameters param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" param/loadparm.c:do_section(3408) Processing section "[global]" doing parameter netbios name = KEK param/loadparm.c:handle_netbios_name(2753) handle_netbios_name: set global_myname to: KEK doing parameter workgroup = KONYVKLUB doing parameter server string = Master Server doing parameter passdb backend = ldapsam:"ldap://ldap.int.mkk.hu ldap://ldap2.int.mkk.hu" doing parameter log file = /var/log/samba/smbd.log doing parameter log level = 0 doing parameter syslog = 0 doing parameter max log size = 50 doing parameter name resolve order = wins bcast hosts doing parameter time server = Yes doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 doing parameter add user script = /usr/sbin/smbldap-useradd -a -m '%u' doing parameter delete user script = /usr/sbin/smbldap-userdel %u doing parameter add group script = /usr/sbin/smbldap-groupadd -p '%g' doing parameter delete group script = /usr/sbin/smbldap-groupdel '%g' doing parameter add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g' doing parameter delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g' doing parameter set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u' doing parameter add machine script = /usr/sbin/smbldap-useradd -w '%u' doing parameter logon script = scripts\logon.bat doing parameter logon path = \\%N\profiles\%U doing parameter logon drive = Y: doing parameter logon home = \\%N\%U doing parameter domain logons = Yes doing parameter os level = 33 doing parameter preferred master = Yes doing parameter domain master = Yes doing parameter local master = Yes doing parameter security = user doing parameter obey pam restrictions = Yes doing parameter wins server = 192.168.0.2 doing parameter ldap suffix = dc=mkk,dc=hu doing parameter ldap machine suffix = ou=Computers doing parameter ldap user suffix = ou=People doing parameter ldap group suffix = ou=Groups doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=samba,ou=DSA,dc=mkk,dc=hu doing parameter ldap ssl = start tls doing parameter ldap delete dn = Yes doing parameter ldap passwd sync = Yes doing parameter idmap uid = 10000-20000 doing parameter idmap gid = 10000-20000 doing parameter admin users = @"Domain Admins" doing parameter printer admin = @"Print Operators" doing parameter ea support = Yes doing parameter map acl inherit = Yes doing parameter printing = cups doing parameter printcap name = CUPS param/loadparm.c:lp_load(3946) pm_process() returned Yes param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find homes param/loadparm.c:set_server_role(3855) set_server_role: role = ROLE_DOMAIN_PDC lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2LE lib/iconv.c:smb_register_charset(111) Registered charset UCS-2LE lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16LE lib/iconv.c:smb_register_charset(111) Registered charset UTF-16LE lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS-2BE lib/iconv.c:smb_register_charset(111) Registered charset UCS-2BE lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-16BE lib/iconv.c:smb_register_charset(111) Registered charset UTF-16BE lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF8 lib/iconv.c:smb_register_charset(111) Registered charset UTF8 lib/iconv.c:smb_register_charset(103) Attempting to register new charset UTF-8 lib/iconv.c:smb_register_charset(111) Registered charset UTF-8 lib/iconv.c:smb_register_charset(103) Attempting to register new charset ASCII lib/iconv.c:smb_register_charset(111) Registered charset ASCII lib/iconv.c:smb_register_charset(103) Attempting to register new charset 646 lib/iconv.c:smb_register_charset(111) Registered charset 646 lib/iconv.c:smb_register_charset(103) Attempting to register new charset ISO-8859-1 lib/iconv.c:smb_register_charset(111) Registered charset ISO-8859-1 lib/iconv.c:smb_register_charset(103) Attempting to register new charset UCS2-HEX lib/iconv.c:smb_register_charset(111) Registered charset UCS2-HEX lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/charcnv.c:charset_name(81) Substituting charset 'ISO-8859-1' for LOCALE lib/util.c:init_names(256) Netbios name list:- my_netbios_names[0]="KEK" lib/interface.c:add_interface(79) added interface ip=192.168.1.3 bcast=192.168.127.255 nmask=255.255.128.0 libsmb/namequery.c:internal_resolve_name(1028) internal_resolve_name: looking up KONYVKLUB#1b lib/gencache.c:gencache_init(59) Opening cache file at /var/lib/samba/gencache.tdb lib/gencache.c:gencache_get(285) Cache entry with key = NBT/KONYVKLUB#1B couldn't be found libsmb/namecache.c:namecache_fetch(195) no entry for KONYVKLUB#1B found. lib/gencache.c:gencache_del(214) Deleting cache entry (key = NBT/KONYVKLUB#1B) libsmb/namequery.c:resolve_wins(752) resolve_wins: Attempting wins lookup for name KONYVKLUB<0x1b> lib/gencache.c:gencache_get(285) Cache entry with key = WINS_SRV_DEAD/192.168.0.2,0.0.0.0 couldn't be found lib/wins_srv.c:wins_srv_is_dead(109) wins_srv_is_dead: 192.168.0.2 is alive lib/wins_srv.c:wins_srv_ip_tag(307) Current wins server for tag '*' with source 0.0.0.0 is 192.168.0.2 lib/gencache.c:gencache_get(285) Cache entry with key = WINS_SRV_DEAD/192.168.0.2,0.0.0.0 couldn't be found lib/wins_srv.c:wins_srv_is_dead(109) wins_srv_is_dead: 192.168.0.2 is alive libsmb/namequery.c:resolve_wins(791) resolve_wins: using WINS server 192.168.0.2 and tag '*' lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 libsmb/nmblib.c:send_udp(776) Sending a packet of len 50 to (192.168.0.2) on port 137 lib/util_sock.c:read_udp_socket(230) read_udp_socket: lastip 192.168.0.2 lastport 137 read: 62 libsmb/nmblib.c:parse_nmb(503) parse_nmb: packet id = 15285 libsmb/nmblib.c:read_packet(754) Received a packet of len 62 from (192.168.0.2) port 137 libsmb/nmblib.c:debug_nmb_packet(109) nmb packet from 192.168.0.2(137) header: id=15285 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=KONYVKLUB<1b> rr_type=32 rr_class=1 ttl=259193 answers 0 char `..... hex 6000C0A80103 libsmb/namequery.c:name_query(492) Got a positive name query response from 192.168.0.2 ( 192.168.1.3 ) libsmb/namequery.c:remove_duplicate_addrs2(320) remove_duplicate_addrs2: looking for duplicate address/port pairs libsmb/namecache.c:namecache_store(131) namecache_store: storing 1 address for KONYVKLUB#1b: 192.168.1.3:0 lib/gencache.c:gencache_set(127) Adding cache entry with key = NBT/KONYVKLUB#1B; value = 192.168.1.3:0 and timeout = Wed Feb 2 12:04:33 2005 (660 seconds ahead) libsmb/namequery.c:internal_resolve_name(1145) internal_resolve_name: returning 1 addresses: 192.168.1.3:0 libsmb/namequery.c:name_status_find(188) name_status_find: looking up KONYVKLUB#1b at 192.168.1.3 lib/gencache.c:gencache_get(285) Cache entry with key = NBT/KONYVKLUB#1B.20.192.168.1.3 couldn't be found libsmb/namecache.c:namecache_status_fetch(308) namecache_status_fetch: no entry for NBT/KONYVKLUB#1B.20.192.168.1.3 found. lib/gencache.c:gencache_del(214) Deleting cache entry (key = NBT/KONYVKLUB#1B.20.192.168.1.3) lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 libsmb/nmblib.c:send_udp(776) Sending a packet of len 50 to (192.168.1.3) on port 137 lib/util_sock.c:read_udp_socket(230) read_udp_socket: lastip 192.168.1.3 lastport 137 read: 229 libsmb/nmblib.c:parse_nmb(503) parse_nmb: packet id = 480 libsmb/nmblib.c:read_packet(754) Received a packet of len 229 from (192.168.1.3) port 137 libsmb/nmblib.c:debug_nmb_packet(109) nmb packet from 192.168.1.3(137) header: id=480 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=KONYVKLUB<1b> rr_type=33 rr_class=1 ttl=0 answers 0 char .KEK hex 074B454B202020202020202020202020 answers 10 char .d.KEK hex 0064004B454B20202020202020202020 answers 20 char .d.KEK hex 20200364004B454B2020202020202020 answers 30 char d.KONYVKLUB hex 202020202064004B4F4E59564B4C5542 answers 40 char ...KONYVKL hex 20202020202000E4004B4F4E59564B4C answers 50 char UB .d.KONYV hex 55422020202020201B64004B4F4E5956 answers 60 char KLUB ...KON hex 4B4C55422020202020201CE4004B4F4E answers 70 char YVKLUB .... hex 59564B4C55422020202020201EE40000 answers 80 char ................ hex 00000000000000000000000000000000 answers 90 char ................ hex 00000000000000000000000000000000 answers a0 char ............. hex 00000000000000000000000000 libsmb/namequery.c:parse_node_status(70) KEK#00: flags = 0x64 libsmb/namequery.c:parse_node_status(70) KEK#03: flags = 0x64 libsmb/namequery.c:parse_node_status(70) KEK#20: flags = 0x64 libsmb/namequery.c:parse_node_status(70) KONYVKLUB#00: flags = 0xe4 libsmb/namequery.c:parse_node_status(70) KONYVKLUB#1b: flags = 0x64 libsmb/namequery.c:parse_node_status(70) KONYVKLUB#1c: flags = 0xe4 libsmb/namequery.c:parse_node_status(70) KONYVKLUB#1e: flags = 0xe4 lib/gencache.c:gencache_set(127) Adding cache entry with key = NBT/KONYVKLUB#1B.20.192.168.1.3; value = KEK and timeout = Wed Feb 2 12:04:33 2005 (660 seconds ahead) libsmb/namecache.c:namecache_status_store(283) namecache_status_store: entry NBT/KONYVKLUB#1B.20.192.168.1.3 -> KEK libsmb/namequery.c:name_status_find(227) name_status_find: name found, name KEK ip address is 192.168.1.3 libsmb/cliconnect.c:cli_start_connection(1385) Connecting to host=KEK lib/util_sock.c:open_socket_out(752) Connecting to 192.168.1.3 at port 445 lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 0 lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 0 lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 16384 lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 lib/util_sock.c:write_socket(449) write_socket(4,183) lib/util_sock.c:write_socket(452) write_socket(4,183) wrote 183 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 127 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=14011 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=48128 (0xBC00) smb_vwv[ 8]= 54 (0x36) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]= 8052 (0x1F74) smb_vwv[13]= 5488 (0x1570) smb_vwv[14]=50441 (0xC509) smb_vwv[15]=50177 (0xC401) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 lib/util.c:dump_data(1990) [000] 6B 65 6B 00 00 00 00 00 00 00 00 00 00 00 00 00 kek..... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=14011 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=48128 (0xBC00) smb_vwv[ 8]= 54 (0x36) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]= 8052 (0x1F74) smb_vwv[13]= 5488 (0x1570) smb_vwv[14]=50441 (0xC509) smb_vwv[15]=50177 (0xC401) smb_vwv[16]=15103 (0x3AFF) smb_bcc=58 lib/util.c:dump_data(1990) [000] 6B 65 6B 00 00 00 00 00 00 00 00 00 00 00 00 00 kek..... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE lib/time.c:get_serverzone(122) Serverzone is -3600 lib/util_sock.c:write_socket(449) write_socket(4,92) lib/util_sock.c:write_socket(452) write_socket(4,92) wrote 92 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 106 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=106 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=14011 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=65 lib/util.c:dump_data(1990) [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 .b.a. .3 ...0...1 [020] 00 31 00 70 00 72 00 65 00 32 00 00 00 4B 00 4F .1.p.r.e .2...K.O [030] 00 4E 00 59 00 56 00 4B 00 4C 00 55 00 42 00 00 .N.Y.V.K .L.U.B.. [040] 00 . lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=106 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=14011 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=65 lib/util.c:dump_data(1990) [000] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [010] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 31 .b.a. .3 ...0...1 [020] 00 31 00 70 00 72 00 65 00 32 00 00 00 4B 00 4F .1.p.r.e .2...K.O [030] 00 4E 00 59 00 56 00 4B 00 4C 00 55 00 42 00 00 .N.Y.V.K .L.U.B.. [040] 00 . lib/util_sock.c:write_socket(449) write_socket(4,74) lib/util_sock.c:write_socket(452) write_socket(4,74) wrote 74 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 48 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 lib/util.c:dump_data(1990) [000] 49 50 43 00 00 00 00 IPC.... libsmb/clientgen.c:cli_init_creds(217) cli_init_creds: user domain lib/util_sock.c:write_socket(449) write_socket(4,104) lib/util_sock.c:write_socket(452) write_socket(4,104) wrote 104 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 103 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=37376 (0x9200) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 rpc_client/cli_pipe.c:rpc_pipe_bind(1319) Bind RPC Pipe[7792]: \PIPE\lsarpc rpc_client/cli_pipe.c:valid_pipe_name(1215) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... rpc_client/cli_pipe.c:valid_pipe_name(1218) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0b rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0048 rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_rb rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba rpc_parse/parse_prs.c:prs_uint16(613) 0010 max_tsize: 10b8 rpc_parse/parse_prs.c:prs_uint16(613) 0012 max_rsize: 10b8 rpc_parse/parse_prs.c:prs_uint32(642) 0014 assoc_gid: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_elements: 00000001 rpc_parse/parse_prs.c:prs_uint16(613) 001c context_id : 0000 rpc_parse/parse_prs.c:prs_uint8(584) 001e num_syntaxes: 01 rpc_parse/parse_prs.c:prs_debug(82) 00001f smb_io_rpc_iface rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid rpc_parse/parse_prs.c:prs_uint32(642) 0020 data : 12345778 rpc_parse/parse_prs.c:prs_uint16(613) 0024 data : 1234 rpc_parse/parse_prs.c:prs_uint16(613) 0026 data : abcd rpc_parse/parse_prs.c:prs_uint8s(729) 0028 data : ef 00 rpc_parse/parse_prs.c:prs_uint8s(729) 002a data : 01 23 45 67 89 ab rpc_parse/parse_prs.c:prs_uint32(642) 0030 version: 00000000 rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_rpc_iface rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_uuid uuid rpc_parse/parse_prs.c:prs_uint32(642) 0034 data : 8a885d04 rpc_parse/parse_prs.c:prs_uint16(613) 0038 data : 1ceb rpc_parse/parse_prs.c:prs_uint16(613) 003a data : 11c9 rpc_parse/parse_prs.c:prs_uint8s(729) 003c data : 9f e8 rpc_parse/parse_prs.c:prs_uint8s(729) 003e data : 08 00 2b 10 48 60 rpc_parse/parse_prs.c:prs_uint32(642) 0044 version: 00000002 rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:7792 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30610 (0x7792) smb_bcc=87 lib/util.c:dump_data(1990) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... lib/util_sock.c:write_socket(449) write_socket(4,158) lib/util_sock.c:write_socket(452) write_socket(4,158) wrote 158 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 124 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 lib/util.c:dump_data(1990) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 lib/util.c:dump_data(1990) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0C 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 68 rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0c rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0044 rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 68 rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set rpc_client/cli_pipe.c:rpc_pipe_bind(1395) rpc_pipe_bind: rpc_api_pipe returned OK. rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_ba rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba rpc_parse/parse_prs.c:prs_uint16(613) 0010 max_tsize: 10b8 rpc_parse/parse_prs.c:prs_uint16(613) 0012 max_rsize: 10b8 rpc_parse/parse_prs.c:prs_uint32(642) 0014 assoc_gid: 000053f0 rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_rpc_addr_str rpc_parse/parse_prs.c:prs_uint16(613) 0018 len: 000c rpc_parse/parse_prs.c:prs_uint8s(729) 001a str: \PIPE\lsass. rpc_parse/parse_prs.c:prs_debug(82) 000026 smb_io_rpc_results rpc_parse/parse_prs.c:prs_uint8(584) 0028 num_results: 01 rpc_parse/parse_prs.c:prs_uint16(613) 002c result : 0000 rpc_parse/parse_prs.c:prs_uint16(613) 002e reason : 0000 rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_rpc_iface rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_uuid uuid rpc_parse/parse_prs.c:prs_uint32(642) 0030 data : 8a885d04 rpc_parse/parse_prs.c:prs_uint16(613) 0034 data : 1ceb rpc_parse/parse_prs.c:prs_uint16(613) 0036 data : 11c9 rpc_parse/parse_prs.c:prs_uint8s(729) 0038 data : 9f e8 rpc_parse/parse_prs.c:prs_uint8s(729) 003a data : 08 00 2b 10 48 60 rpc_parse/parse_prs.c:prs_uint32(642) 0040 version: 00000002 rpc_client/cli_pipe.c:check_bind_response(1271) bind_rpc_pipe: accepted! rpc_parse/parse_lsa.c:init_q_open_pol(274) init_open_pol: attr:0 da:33554432 rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) init_lsa_obj_attr rpc_parse/parse_prs.c:prs_debug(82) 000000 lsa_io_q_open_pol rpc_parse/parse_prs.c:prs_uint32(642) 0000 ptr : 00000001 rpc_parse/parse_prs.c:prs_uint16(613) 0004 system_name: 005c rpc_parse/parse_prs.c:prs_debug(82) 000008 lsa_io_obj_attr rpc_parse/parse_prs.c:prs_uint32(642) 0008 len : 00000018 rpc_parse/parse_prs.c:prs_uint32(642) 000c ptr_root_dir: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0010 ptr_obj_name: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0014 attributes : 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0018 ptr_sec_desc: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 001c ptr_sec_qos : 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0020 des_access: 02000000 rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0x6 data_len: 0x3c rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 3c auth_len: 0 alloc_hint: 2c rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 003c rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000002 rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 0000002c rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 rpc_parse/parse_prs.c:prs_uint16(613) 0016 opnum : 0006 rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:7792 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=142 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 60 (0x3C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 60 (0x3C) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30610 (0x7792) smb_bcc=75 lib/util.c:dump_data(1990) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 3C 00 00 00 02 00 00 00 2C .......< ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 02 ........ ... lib/util_sock.c:write_socket(449) write_socket(4,146) lib/util_sock.c:write_socket(452) write_socket(4,146) wrote 146 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 104 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 lib/util.c:dump_data(1990) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 2E B1 00 42 BC 36 00 00 00 00 00 ........ B.6..... [030] 00 . lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 lib/util.c:dump_data(1990) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 2E B1 00 42 BC 36 00 00 00 00 00 ........ B.6..... [030] 00 . rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 48 rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0030 rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000002 rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000018 rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 48 rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set rpc_parse/parse_prs.c:prs_debug(82) 000018 lsa_io_r_open_pol rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_pol_hnd rpc_parse/parse_prs.c:prs_uint32(642) 0018 data1: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 001c data2: 00000001 rpc_parse/parse_prs.c:prs_uint16(613) 0020 data3: 0000 rpc_parse/parse_prs.c:prs_uint16(613) 0022 data4: 0000 rpc_parse/parse_prs.c:prs_uint8s(729) 0024 data5: 2e b1 00 42 bc 36 00 00 rpc_parse/parse_prs.c:prs_ntstatus(672) 002c status: NT_STATUS_OK rpc_parse/parse_lsa.c:init_q_query(459) init_q_query rpc_parse/parse_prs.c:prs_debug(82) 000000 lsa_io_q_query rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd rpc_parse/parse_prs.c:prs_uint32(642) 0000 data1: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0004 data2: 00000001 rpc_parse/parse_prs.c:prs_uint16(613) 0008 data3: 0000 rpc_parse/parse_prs.c:prs_uint16(613) 000a data4: 0000 rpc_parse/parse_prs.c:prs_uint8s(729) 000c data5: 2e b1 00 42 bc 36 00 00 rpc_parse/parse_prs.c:prs_uint16(613) 0014 info_class: 0005 rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0x7 data_len: 0x2e rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 2e auth_len: 0 alloc_hint: 1e rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 002e rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000003 rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 0000001e rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 rpc_parse/parse_prs.c:prs_uint16(613) 0016 opnum : 0007 rpc_client/cli_pipe.c:rpc_api_pipe(421) rpc_api_pipe: fnum:7792 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30610 (0x7792) smb_bcc=61 lib/util.c:dump_data(1990) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 03 00 00 00 1E ........ ........ [020] 00 00 00 00 00 07 00 00 00 00 00 01 00 00 00 00 ........ ........ [030] 00 00 00 2E B1 00 42 BC 36 00 00 05 00 ......B. 6.... lib/util_sock.c:write_socket(449) write_socket(4,132) lib/util_sock.c:write_socket(452) write_socket(4,132) wrote 132 lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 164 lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=164 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=109 lib/util.c:dump_data(1990) [000] 00 05 00 02 03 10 00 00 00 6C 00 00 00 03 00 00 ........ .l...... [010] 00 54 00 00 00 00 00 00 00 00 00 00 22 05 00 00 .T...... ...."... [020] 00 12 00 14 00 01 00 00 00 01 00 00 00 0A 00 00 ........ ........ [030] 00 00 00 00 00 09 00 00 00 4B 00 4F 00 4E 00 59 ........ .K.O.N.Y [040] 00 56 00 4B 00 4C 00 55 00 42 00 00 00 04 00 00 .V.K.L.U .B...... [050] 00 01 04 00 00 00 00 00 05 15 00 00 00 8B 9D C2 ........ ........ [060] 33 43 94 0D BC 18 FE E9 7F 00 00 00 00 3C...... ..... lib/util.c:show_msg(464) lib/util.c:show_msg(474) size=164 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=14011 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 108 (0x6C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 108 (0x6C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=109 lib/util.c:dump_data(1990) [000] 00 05 00 02 03 10 00 00 00 6C 00 00 00 03 00 00 ........ .l...... [010] 00 54 00 00 00 00 00 00 00 00 00 00 22 05 00 00 .T...... ...."... [020] 00 12 00 14 00 01 00 00 00 01 00 00 00 0A 00 00 ........ ........ [030] 00 00 00 00 00 09 00 00 00 4B 00 4F 00 4E 00 59 ........ .K.O.N.Y [040] 00 56 00 4B 00 4C 00 55 00 42 00 00 00 04 00 00 .V.K.L.U .B...... [050] 00 01 04 00 00 00 00 00 05 15 00 00 00 8B 9D C2 ........ ........ [060] 33 43 94 0D BC 18 FE E9 7F 00 00 00 00 3C...... ..... rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 108 rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 006c rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000003 rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000054 rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 rpc_client/cli_pipe.c:rpc_api_pipe(494) rpc_api_pipe: len left: 0 smbtrans read: 108 rpc_client/cli_pipe.c:rpc_api_pipe(536) rpc_api_pipe: fragment first and last both set rpc_parse/parse_prs.c:prs_debug(82) 000018 lsa_io_r_query rpc_parse/parse_prs.c:prs_uint32(642) 0018 undoc_buffer: 22000000 rpc_parse/parse_prs.c:prs_uint16(613) 001c info_class: 0005 rpc_parse/parse_prs.c:prs_debug(82) 000020 lsa_io_dom_query rpc_parse/parse_prs.c:prs_uint16(613) 0020 uni_dom_max_len: 0012 rpc_parse/parse_prs.c:prs_uint16(613) 0022 uni_dom_str_len: 0014 rpc_parse/parse_prs.c:prs_uint32(642) 0024 buffer_dom_name: 00000001 rpc_parse/parse_prs.c:prs_uint32(642) 0028 buffer_dom_sid : 00000001 rpc_parse/parse_prs.c:prs_debug(82) 00002c smb_io_unistr2 unistr2 rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_max_len: 0000000a rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset : 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0034 uni_str_len: 00000009 rpc_parse/parse_prs.c:dbg_rw_punival(814) 0038 buffer : K.O.N.Y.V.K.L.U.B. rpc_parse/parse_prs.c:prs_debug(82) 00004c smb_io_dom_sid2 rpc_parse/parse_prs.c:prs_uint32(642) 004c num_auths: 00000004 rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_dom_sid sid rpc_parse/parse_prs.c:prs_uint8(584) 0050 sid_rev_num: 01 rpc_parse/parse_prs.c:prs_uint8(584) 0051 num_auths : 04 rpc_parse/parse_prs.c:prs_uint8(584) 0052 id_auth[0] : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0053 id_auth[1] : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0054 id_auth[2] : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0055 id_auth[3] : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0056 id_auth[4] : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0057 id_auth[5] : 05 rpc_parse/parse_prs.c:prs_uint32s(869) 0058 sub_auths : 00000015 33c29d8b bc0d9443 7fe9fe18 rpc_parse/parse_prs.c:prs_ntstatus(672) 0068 status: NT_STATUS_OK rpc_parse/parse_lsa.c:init_lsa_q_close(1206) init_lsa_q_close rpc_parse/parse_prs.c:prs_debug(82) 000000 lsa_io_q_close rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd rpc_parse/parse_prs.c:prs_uint32(642) 0000 data1: 00000000 rpc_parse/parse_prs.c:prs_uint32(642) 0004 data2: 00000001 rpc_parse/parse_prs.c:prs_uint16(613) 0008 data3: 0000 rpc_parse/parse_prs.c:prs_uint16(613) 000a data4: 0000 rpc_parse/parse_prs.c:prs_uint8s(729) 000c data5: 2e b1 00 42 bc 36 00 00 rpc_client/cli_pipe.c:create_rpc_request(852) create_rpc_request: opnum: 0x0 data_len: 0x2c rpc_client/cli_pipe.c:create_rpc_request(869) create_rpc_request: data_len: 2c auth_len: 0 alloc_hint: 1c rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 Joined domain KONYVKLUB.