[2007/03/01 22:13:05, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:13:05, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.10 bcast=192.168.1.255 nmask=255.255.255.0 [2007/03/01 22:13:05, 5] lib/util.c:init_names(260) Netbios name list:- my_netbios_names[0]="EG-DREAM" [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_context_list(870) Trying to load: smbpasswd [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend smbpasswd [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'smbpasswd' [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend tdbsam [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'tdbsam' [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(94) Attempting to register passdb backend guest [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:smb_register_passdb(107) Successfully added passdb backend 'guest' [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) Found pdb backend smbpasswd [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) pdb backend smbpasswd has a valid init [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(748) Attempting to find an passdb backend to match guest (guest) [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(769) Found pdb backend guest [2007/03/01 22:13:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(772) pdb backend guest has a valid init [2007/03/01 22:13:06, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:13:06, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:13:06, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:13:06, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:13:06, 8] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 3 gids [2007/03/01 22:13:06, 8] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 2 gids [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:13:06, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:13:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:13:06, 5] auth/auth_util.c:make_server_info_sam(829) make_server_info_sam: made server info for user root -> root [2007/03/01 22:13:06, 3] smbd/server.c:main(835) loaded services [2007/03/01 22:13:06, 3] smbd/server.c:main(850) Becoming a daemon. [2007/03/01 22:13:06, 8] lib/util.c:fcntl_lock(1815) fcntl_lock 8 13 0 1 1 [2007/03/01 22:13:06, 8] lib/util.c:fcntl_lock(1850) fcntl_lock: Lock call successful [2007/03/01 22:13:06, 2] lib/tallocmsg.c:register_msg_pool_usage(56) Registered MSG_REQ_POOL_USAGE [2007/03/01 22:13:06, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2007/03/01 22:13:06, 5] lib/gencache.c:gencache_init(59) Opening cache file at /var/lock/gencache.tdb [2007/03/01 22:13:06, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKU] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKCR] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKPD] [2007/03/01 22:13:06, 6] registry/reg_db.c:init_registry_data(102) init_registry_data: Adding [HKPT] [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [Samba Printer Port], len: 2 [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DefaultSpoolDirectory], len: 70 [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DisplayName], len: 20 [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [ErrorControl], len: 4 [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [ErrorControl], len: 4 [2007/03/01 22:13:06, 8] registry/reg_db.c:regdb_unpack_values(436) specific: [DisplayName], len: 20 [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(248) pathtree_add: Enter [2007/03/01 22:13:06, 8] lib/adt_tree.c:pathtree_add(317) pathtree_add: Exit [2007/03/01 22:13:06, 5] smbd/connection.c:claim_connection(170) claiming 0 [2007/03/01 22:13:06, 3] printing/printing.c:start_background_queue(1321) start_background_queue: Starting background LPQ thread [2007/03/01 22:13:06, 5] printing/printing.c:start_background_queue(1331) start_background_queue: background LPQ thread started [2007/03/01 22:13:06, 5] smbd/connection.c:claim_connection(170) claiming smbd lpq backend 0 [2007/03/01 22:13:06, 5] printing/printing.c:start_background_queue(1342) start_background_queue: background LPQ thread waiting for messages [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:13:06, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:13:06, 2] smbd/server.c:open_sockets_smbd(330) waiting for a connection [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:35, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:36, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:36, 3] smbd/oplock.c:init_oplocks(1380) open_oplock_ipc: opening loopback UDP socket. [2007/03/01 22:16:36, 3] smbd/oplock.c:init_oplocks(1411) open_oplock ipc: pid = 5289, global_oplock_port = 1045 [2007/03/01 22:16:36, 4] lib/time.c:get_serverzone(125) Serverzone is -3600 [2007/03/01 22:16:36, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x85 [2007/03/01 22:16:36, 3] smbd/process.c:process_smb(1114) Transaction 0 of length 137 [2007/03/01 22:16:36, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:36, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2007/03/01 22:16:36, 3] smbd/process.c:switch_message(900) switch message SMBnegprot (pid 5289) conn 0x0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN1.0] [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [Windows for Workgroups 3.1a] [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LM1.2X002] [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN2.1] [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [NT LM 0.12] [2007/03/01 22:16:37, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:37, 5] smbd/connection.c:claim_connection(170) claiming 0 [2007/03/01 22:16:37, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:37, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2007/03/01 22:16:37, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:37, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:37, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:37, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:37, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:37, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_nt1(331) not using SPNEGO [2007/03/01 22:16:37, 3] smbd/negprot.c:reply_negprot(559) Selected protocol NT LM 0.12 [2007/03/01 22:16:37, 5] smbd/negprot.c:reply_negprot(565) negprot index=5 [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=97 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12802 (0x3202) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=43264 (0xA900) smb_vwv[ 8]= 20 (0x14) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]=28136 (0x6DE8) smb_vwv[13]=18149 (0x46E5) smb_vwv[14]=51036 (0xC75C) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 2303 (0x8FF) smb_bcc=28 [2007/03/01 22:16:37, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x140 [2007/03/01 22:16:37, 3] smbd/process.c:process_smb(1114) Transaction 1 of length 324 [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=320 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=7296 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 238 (0xEE) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 5289 (0x14A9) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=177 [2007/03/01 22:16:37, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5289) conn 0x0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[SERVER] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:37, 2] smbd/sesssetup.c:setup_new_vc_session(704) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/03/01 22:16:37, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[SERVER]\[Administrator]@[192.168.1.251] [2007/03/01 22:16:37, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Administrator [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is administrator [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [Administrator]! [2007/03/01 22:16:37, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:37, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:37, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:37, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:37, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:37, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:37, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:37, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:37, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=320 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=7296 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 320 (0x140) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 24 (0x18) smb_bcc=71 [2007/03/01 22:16:37, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5289) conn 0x0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [IPC$] [2007/03/01 22:16:37, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service ipc$ [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user IPC$ [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is ipc$ [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is IPC$ [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in ipc$ [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [IPC$]! [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:37, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:37, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:37, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:37, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:37, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:37, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:37, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:37, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:37, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:37, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:37, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:37, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:37, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:37, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:37, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:37, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:37, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:37, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:37, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:37, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:37, 3] smbd/service.c:make_connection_snum(477) Connect path is '/tmp' for service [IPC$] [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:37, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:37, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:37, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:37, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2007/03/01 22:16:37, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:37, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:37, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:37, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:37, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 3] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service IPC$ initially as user root (uid=0, gid=0) (pid 5289) [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=IPC$ [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=116 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7296 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:37, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:37, 3] smbd/process.c:process_smb(1114) Transaction 2 of length 104 [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=7360 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2007/03/01 22:16:37, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:37, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:37, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:37, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:37, 4] smbd/vfs.c:vfs_ChDir(737) vfs_ChDir to /tmp [2007/03/01 22:16:37, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \srvsvc. [2007/03/01 22:16:37, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe srvsvc opening. [2007/03/01 22:16:37, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2007/03/01 22:16:37, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested srvsvc [2007/03/01 22:16:37, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe srvsvc (pipes_open=0) [2007/03/01 22:16:37, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe srvsvc with handle 761c (pipes_open=1) [2007/03/01 22:16:37, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name srvsvc pnum=761c [2007/03/01 22:16:37, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \srvsvc [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=7360 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 7168 (0x1C00) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:37, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:37, 3] smbd/process.c:process_smb(1114) Transaction 3 of length 184 [2007/03/01 22:16:37, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:37, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7424 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30236 (0x761C) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:37, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:37, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:37, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761c [2007/03/01 22:16:37, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761c (pipes_open=1) [2007/03/01 22:16:37, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761c name: srvsvc open: Yes len: 116 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:37, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:37, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:37, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:37, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 4b324fc8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 1670 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 01d3 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : 12 78 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000003 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 4b324fc8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 1670 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 01d3 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : 12 78 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000003 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:38, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\srvsvc [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\ntsvcs. [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=761c nwritten=116 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7424 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 4 of length 63 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7488 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30236 (0x761C) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761c [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761c (pipes_open=1) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761c name: srvsvc len: 1024 [2007/03/01 22:16:38, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=761c min=1024 max=1024 nread=68 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7488 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb8 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 5 of length 188 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=184 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=7552 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 100 (0x64) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30236 (0x761C) smb_bcc=117 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=100 params=0 setup=2 [2007/03/01 22:16:38, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:38, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:38, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761c [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761c (pipes_open=1) [2007/03/01 22:16:38, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 761c) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761c name: srvsvc open: Yes len: 100 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0064 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 0000004c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 000f [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\srvsvc [2007/03/01 22:16:38, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: srvsvc op 0xf - api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL [2007/03/01 22:16:38, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[3].fn == 0x8123e24 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_enum [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr_srv_name: 00020000 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00002e srv_io_srv_share_ctr share_ctr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 info_level: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 switch_value: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0038 ptr_share_info: 00020004 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c num_entries: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 ptr_entries: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 preferred_len: ffffffff [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_enum_hnd enum_hnd [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0048 ptr_hnd: 00000000 [2007/03/01 22:16:38, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_enum_all(1420) _srv_net_share_enum: 1420 [2007/03/01 22:16:38, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_enum(729) init_srv_r_net_share_enum: 729 [2007/03/01 22:16:38, 5] rpc_server/srv_srvsvc_nt.c:init_srv_share_info_ctr(501) init_srv_share_info_ctr [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: Configuration 0 Configuration files - take care! [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: Harddisk 0 The harddisk [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: Movies 0 Recorded Movies [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: Usb 0 Usb Stick [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: IPC$ 3 IPC Service (DreamBOX network services) [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: ADMIN$ 3 IPC Service (DreamBOX network services) [2007/03/01 22:16:38, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2007/03/01 22:16:38, 5] rpc_parse/parse_misc.c:init_enum_hnd(159) smb_io_enum_hnd [2007/03/01 22:16:38, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_enum_all(1432) _srv_net_share_enum: 1432 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_enum [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_ctr share_ctr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 info_level: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 switch_value: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 ptr_share_info: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c num_entries: 00000006 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 ptr_entries: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0014 num_entries2: 00000006 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000018 srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c type : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0028 type : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 002c ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000030 srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 type : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0038 ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 type : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000048 srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0048 ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c type : 00000003 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000054 srv_io_share_info1 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0054 ptr_netname: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0058 type : 00000003 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 005c ptr_remark : 00000001 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000060 srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 uni_max_len: 0000000e [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0064 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0068 uni_str_len: 0000000e [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 006c buffer : C.o.n.f.i.g.u.r.a.t.i.o.n... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0088 uni_max_len: 00000021 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 008c offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0090 uni_str_len: 00000021 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0094 buffer : C.o.n.f.i.g.u.r.a.t.i.o.n. .f.i.l.e.s. .-. .t.a.k.e. .c.a.r.e.!... [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000d6 srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000d8 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 00d8 uni_max_len: 00000009 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 00dc offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 00e0 uni_str_len: 00000009 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 00e4 buffer : H.a.r.d.d.i.s.k... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000f8 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 00f8 uni_max_len: 0000000d [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 00fc offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0100 uni_str_len: 0000000d [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0104 buffer : T.h.e. .h.a.r.d.d.i.s.k... [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00011e srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000120 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0120 uni_max_len: 00000007 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0124 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0128 uni_str_len: 00000007 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 012c buffer : M.o.v.i.e.s... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 00013c smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 013c uni_max_len: 00000010 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0140 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0144 uni_str_len: 00000010 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0148 buffer : R.e.c.o.r.d.e.d. .M.o.v.i.e.s... [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000168 srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000168 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0168 uni_max_len: 00000004 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 016c offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0170 uni_str_len: 00000004 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0174 buffer : U.s.b... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 00017c smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 017c uni_max_len: 0000000a [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0180 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0184 uni_str_len: 0000000a [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0188 buffer : U.s.b. .S.t.i.c.k... [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00019c srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 00019c smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 019c uni_max_len: 00000005 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 01a0 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 01a4 uni_str_len: 00000005 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 01a8 buffer : I.P.C.$... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001b4 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 01b4 uni_max_len: 00000028 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 01b8 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 01bc uni_str_len: 00000028 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 01c0 buffer : I.P.C. .S.e.r.v.i.c.e. .(.D.r.e.a.m.B.O.X. .n.e.t.w.o.r.k. .s.e.r.v.i.c.e.s.)... [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000210 srv_io_share_info1_str [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000210 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0210 uni_max_len: 00000007 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0214 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0218 uni_str_len: 00000007 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 021c buffer : A.D.M.I.N.$... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 00022c smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 022c uni_max_len: 00000028 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0230 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0234 uni_str_len: 00000028 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0238 buffer : I.P.C. .S.e.r.v.i.c.e. .(.D.r.e.a.m.B.O.X. .n.e.t.w.o.r.k. .s.e.r.v.i.c.e.s.)... [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0288 total_entries: 00000006 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00028c smb_io_enum_hnd enum_hnd [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 028c ptr_hnd: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_werror(729) 0290 status: WERR_OK [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called srvsvc successfully [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 714 [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761c name: srvsvc len: 1024 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 02ac [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000294 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:38, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..684] [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=740 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=7552 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 684 (0x2AC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 684 (0x2AC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=685 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 6 of length 45 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7616 smt_wct=3 smb_vwv[ 0]=30236 (0x761C) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761c [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761c (pipes_open=1) [2007/03/01 22:16:38, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:761c [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name srvsvc pnum=761c (pipes_open=0) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7616 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x66 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 7 of length 106 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7680 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=19 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \spoolss. [2007/03/01 22:16:38, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe spoolss opening. [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested spoolss (pipes_open=0) [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested spoolss [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe spoolss (pipes_open=0) [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe spoolss with handle 761d (pipes_open=1) [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name spoolss pnum=761d [2007/03/01 22:16:38, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \spoolss [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7680 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 7424 (0x1D00) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 8 of length 184 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7744 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30237 (0x761D) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761d [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name spoolss pnum=761d (pipes_open=1) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761d name: spoolss open: Yes len: 116 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:38, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 12345678 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 1234 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : abcd [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : ef 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 01 23 45 67 89 ab [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000001 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 12345678 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 1234 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : abcd [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : ef 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 01 23 45 67 89 ab [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000001 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:38, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\spoolss [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000e [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\spoolss. [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_rpc_results [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=761d nwritten=116 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7744 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 9 of length 63 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7808 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30237 (0x761D) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761d [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name spoolss pnum=761d (pipes_open=1) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761d name: spoolss len: 1024 [2007/03/01 22:16:38, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=761d min=1024 max=1024 nread=68 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=7808 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x11c [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 10 of length 288 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=284 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7872 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 200 (0xC8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 200 (0xC8) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30237 (0x761D) smb_bcc=217 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=200 params=0 setup=2 [2007/03/01 22:16:38, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:38, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:38, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761d [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name spoolss pnum=761d (pipes_open=1) [2007/03/01 22:16:38, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 761d) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761d name: spoolss open: Yes len: 200 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 00c8 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 000000b0 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0045 [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 119 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\spoolss [2007/03/01 22:16:38, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2007/03/01 22:16:38, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[1].fn == 0x812b448 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_open_printer_ex [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr: 00020000 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 printername [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000030 spoolss_io_printer_default [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 datatype_ptr: 00000000 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_unistr2 - NULL datatype [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 000034 spoolss_io_devmode_cont [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 size: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0038 devmode_ptr: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c access_required: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 user_switch: 00000001 [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000044 spool_io_user_level [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 level: 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0048 ptr: 00020004 [2007/03/01 22:16:38, 7] rpc_parse/parse_prs.c:prs_debug(82) 00004c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c size: 0000001c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 ptr: 00020008 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0054 ptr: 0002000c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0058 build: 00000ece [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 005c major: 00000003 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 minor: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0064 processor: 00000000 [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0068 uni_max_len: 00000009 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 006c offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0070 uni_str_len: 00000009 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0074 buffer : \.\.S.E.R.V.E.R... [2007/03/01 22:16:38, 8] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_unistr2 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0088 uni_max_len: 0000000e [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 008c offset : 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0090 uni_str_len: 0000000e [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0094 buffer : A.d.m.i.n.i.s.t.r.a.t.o.r... checking name: \\192.168.1.10 [2007/03/01 22:16:38, 4] rpc_server/srv_lsa_hnd.c:create_policy_hnd(142) Opened policy hnd[1] [000] 00 00 00 00 01 00 00 00 00 00 00 00 B6 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:38, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(471) Setting printer type=\\192.168.1.10 Printer is a print server [2007/03/01 22:16:38, 4] rpc_server/srv_spoolss_nt.c:set_printer_hnd_name(507) Setting printer name=\\192.168.1.10 (len=14) [2007/03/01 22:16:38, 8] lib/util.c:is_myname(1874) is_myname("192.168.1.10") returns 0 [2007/03/01 22:16:38, 5] rpc_server/srv_spoolss_nt.c:open_printer_hnd(644) 1 printer handles active [2007/03/01 22:16:38, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 B6 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:38, 4] rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1706) Setting print server access = SERVER_ACCESS_ENUMERATE [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_open_printer_ex [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 01000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b6 42 e7 45 a9 14 00 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_werror(729) 0014 status code: WERR_OK [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called spoolss successfully [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 152 [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761d name: spoolss len: 1024 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0030 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000018 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:38, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..48] [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7872 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x80 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 11 of length 132 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7936 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30237 (0x761D) smb_bcc=61 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=44 params=0 setup=2 [2007/03/01 22:16:38, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:38, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:38, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761d [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name spoolss pnum=761d (pipes_open=1) [2007/03/01 22:16:38, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 761d) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761d name: spoolss open: Yes len: 44 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 002c [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000002 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000014 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 001d [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\spoolss [2007/03/01 22:16:38, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: spoolss op 0x1d - api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER [2007/03/01 22:16:38, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[3].fn == 0x812b9b4 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_closeprinter [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 01000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b6 42 e7 45 a9 14 00 00 [2007/03/01 22:16:38, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 B6 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:38, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 B6 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:38, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 01 00 00 00 00 00 00 00 B6 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:38, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_closeprinter [2007/03/01 22:16:38, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 00000000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: 00 00 00 00 00 00 00 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_werror(729) 0014 status: WERR_OK [2007/03/01 22:16:38, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called spoolss successfully [2007/03/01 22:16:38, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761d name: spoolss len: 1024 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0030 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000002 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000018 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:38, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..48] [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=360 smb_uid=0 smb_mid=7936 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 12 of length 45 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8000 smt_wct=3 smb_vwv[ 0]=30237 (0x761D) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761d [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name spoolss pnum=761d (pipes_open=1) [2007/03/01 22:16:38, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:761d [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name spoolss pnum=761d (pipes_open=0) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8000 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 13 of length 104 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8064 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 256 (0x100) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \wkssvc. [2007/03/01 22:16:38, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe wkssvc opening. [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested wkssvc (pipes_open=0) [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested wkssvc [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe wkssvc (pipes_open=0) [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe wkssvc with handle 761e (pipes_open=1) [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name wkssvc pnum=761e [2007/03/01 22:16:38, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \wkssvc [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8064 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 7680 (0x1E00) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:38, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:38, 3] smbd/process.c:process_smb(1114) Transaction 14 of length 184 [2007/03/01 22:16:38, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:38, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8128 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30238 (0x761E) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:38, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:38, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:38, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761e [2007/03/01 22:16:38, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=761e (pipes_open=1) [2007/03/01 22:16:38, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761e name: wkssvc open: Yes len: 116 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:38, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 6bffd098 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : a112 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 3610 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : 98 33 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 46 c3 f8 7e 34 5a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 6bffd098 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : a112 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 3610 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : 98 33 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 46 c3 f8 7e 34 5a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\wkssvc [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\ntsvcs. [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=761e nwritten=116 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8128 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 15 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8192 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30238 (0x761E) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761e [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=761e (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761e name: wkssvc len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=761e min=1024 max=1024 nread=68 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8192 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xa0 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 16 of length 164 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8256 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 76 (0x4C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30238 (0x761E) smb_bcc=93 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=76 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761e [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=761e (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "wkssvc" (pnum 761e) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761e name: wkssvc open: Yes len: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 004c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000034 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0000 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\wkssvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: wkssvc op 0x0 - api_rpcTNP: rpc command: WKS_Q_QUERY_INFO [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[0].fn == 0x811bf70 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 wks_io_q_query_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr_srv_name: 00020000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0030 switch_value: 0064 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:_wks_query_info(66) _wks_query_info: 66 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:create_wks_info_100(40) create_wks_info_100: 40 [2007/03/01 22:16:39, 5] rpc_parse/parse_wks.c:init_wks_info_100(79) Init WKS_INFO_100: 79 [2007/03/01 22:16:39, 5] rpc_parse/parse_wks.c:init_wks_r_query_info(139) init_wks_r_unknown_0: 139 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:_wks_query_info(76) _wks_query_info: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 wks_io_r_query_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 switch_value: 0064 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 ptr_1 : 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 wks_io_wks_info_100 inf [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 platform_id : 000001f4 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c ptr_compname: 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 ptr_lan_grp : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0014 ver_major : 00000004 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 ver_minor : 00000009 [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c uni_max_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 uni_str_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0028 buffer : E.G.-.D.R.E.A.M... [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c uni_max_len: 0000000a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 uni_str_len: 0000000a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0048 buffer : H.A.U.S.-.N.E.T.Z... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(699) 005c status : NT_STATUS_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called wkssvc successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 120 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761e name: wkssvc len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0078 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000060 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..120] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8256 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 120 (0x78) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 120 (0x78) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 17 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8320 smt_wct=3 smb_vwv[ 0]=30238 (0x761E) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761e [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=761e (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:761e [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name wkssvc pnum=761e (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8320 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 18 of length 104 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8384 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \srvsvc. [2007/03/01 22:16:39, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe srvsvc opening. [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested srvsvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe srvsvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe srvsvc with handle 761f (pipes_open=1) [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name srvsvc pnum=761f [2007/03/01 22:16:39, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \srvsvc [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8384 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 7936 (0x1F00) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 19 of length 184 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8448 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30239 (0x761F) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761f [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761f (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761f name: srvsvc open: Yes len: 116 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 4b324fc8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 1670 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 01d3 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : 12 78 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000003 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 4b324fc8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 1670 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 01d3 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : 12 78 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000003 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\srvsvc [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\ntsvcs. [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=761f nwritten=116 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8448 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 20 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30239 (0x761F) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761f [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761f (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761f name: srvsvc len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=761f min=1024 max=1024 nread=68 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xa0 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 21 of length 164 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8576 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 76 (0x4C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30239 (0x761F) smb_bcc=93 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=76 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761f [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761f (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 761f) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 761f name: srvsvc open: Yes len: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 004c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000034 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0015 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\srvsvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: srvsvc op 0x15 - api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[11].fn == 0x8123830 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_srv_get_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr_srv_name : 00020000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 switch_value : 00000065 [2007/03/01 22:16:39, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_srv_get_info(1212) srv_net_srv_get_info: 1212 [2007/03/01 22:16:39, 5] rpc_parse/parse_srv.c:init_srv_info_101(2809) init_srv_info_101 [2007/03/01 22:16:39, 5] rpc_parse/parse_srv.c:init_srv_r_net_srv_get_info(3044) init_srv_r_net_srv_get_info [2007/03/01 22:16:39, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_srv_get_info(1257) srv_net_srv_get_info: 1257 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_srv_get_info [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_info_ctr ctr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 switch_value: 00000065 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 ptr_srv_ctr : 00000001 [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_info_101 sv101 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 platform_id : 000001f4 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c ptr_name : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 ver_major : 00000004 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0014 ver_minor : 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 srv_type : 00009a03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c ptr_comment : 00000001 [2007/03/01 22:16:39, 8] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_unistr2 uni_name [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 uni_max_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0028 uni_str_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 002c buffer : E.G.-.D.R.E.A.M... [2007/03/01 22:16:39, 8] rpc_parse/parse_prs.c:prs_debug(82) 00003e smb_io_unistr2 uni_comment [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 uni_max_len: 0000001a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0048 uni_str_len: 0000001a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 004c buffer : D.r.e.a.m.B.O.X. .n.e.t.w.o.r.k. .s.e.r.v.i.c.e.s... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0080 status: WERR_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called srvsvc successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 208 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 761f name: srvsvc len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 009c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000084 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..156] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=212 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8576 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 156 (0x9C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 156 (0x9C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=157 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 22 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8640 smt_wct=3 smb_vwv[ 0]=30239 (0x761F) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=761f [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=761f (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:761f [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name srvsvc pnum=761f (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8640 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 23 of length 104 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8704 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 256 (0x100) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \wkssvc. [2007/03/01 22:16:39, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe wkssvc opening. [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested wkssvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested wkssvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe wkssvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe wkssvc with handle 7620 (pipes_open=1) [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name wkssvc pnum=7620 [2007/03/01 22:16:39, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \wkssvc [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8704 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8192 (0x2000) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 24 of length 184 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8768 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30240 (0x7620) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7620 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=7620 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7620 name: wkssvc open: Yes len: 116 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 6bffd098 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : a112 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 3610 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : 98 33 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 46 c3 f8 7e 34 5a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 6bffd098 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : a112 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 3610 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : 98 33 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 46 c3 f8 7e 34 5a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\wkssvc [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\ntsvcs. [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7620 nwritten=116 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8768 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 25 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8832 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30240 (0x7620) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7620 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=7620 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7620 name: wkssvc len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7620 min=1024 max=1024 nread=68 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8832 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xa0 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 26 of length 164 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8896 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 76 (0x4C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30240 (0x7620) smb_bcc=93 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=76 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7620 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=7620 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "wkssvc" (pnum 7620) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7620 name: wkssvc open: Yes len: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 004c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000034 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0000 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\wkssvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: wkssvc op 0x0 - api_rpcTNP: rpc command: WKS_Q_QUERY_INFO [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[0].fn == 0x811bf70 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 wks_io_q_query_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr_srv_name: 00020000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0030 switch_value: 0064 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:_wks_query_info(66) _wks_query_info: 66 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:create_wks_info_100(40) create_wks_info_100: 40 [2007/03/01 22:16:39, 5] rpc_parse/parse_wks.c:init_wks_info_100(79) Init WKS_INFO_100: 79 [2007/03/01 22:16:39, 5] rpc_parse/parse_wks.c:init_wks_r_query_info(139) init_wks_r_unknown_0: 139 [2007/03/01 22:16:39, 5] rpc_server/srv_wkssvc_nt.c:_wks_query_info(76) _wks_query_info: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 wks_io_r_query_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 switch_value: 0064 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 ptr_1 : 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 wks_io_wks_info_100 inf [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 platform_id : 000001f4 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c ptr_compname: 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 ptr_lan_grp : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0014 ver_major : 00000004 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 ver_minor : 00000009 [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c uni_max_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 uni_str_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0028 buffer : E.G.-.D.R.E.A.M... [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c uni_max_len: 0000000a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 uni_str_len: 0000000a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0048 buffer : H.A.U.S.-.N.E.T.Z... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(699) 005c status : NT_STATUS_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called wkssvc successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 120 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7620 name: wkssvc len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0078 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000060 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..120] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=8896 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 120 (0x78) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 120 (0x78) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=121 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 27 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8960 smt_wct=3 smb_vwv[ 0]=30240 (0x7620) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7620 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name wkssvc pnum=7620 (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:7620 [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name wkssvc pnum=7620 (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=8960 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 28 of length 104 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9024 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \srvsvc. [2007/03/01 22:16:39, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe srvsvc opening. [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested srvsvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe srvsvc (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe srvsvc with handle 7621 (pipes_open=1) [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name srvsvc pnum=7621 [2007/03/01 22:16:39, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \srvsvc [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9024 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8448 (0x2100) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 29 of length 184 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9088 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30241 (0x7621) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7621 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=7621 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7621 name: srvsvc open: Yes len: 116 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 4b324fc8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 1670 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 01d3 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : 12 78 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000003 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 4b324fc8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 1670 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 01d3 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : 12 78 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 5a 47 bf 6e e1 88 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000003 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\srvsvc [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\ntsvcs. [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7621 nwritten=116 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9088 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 30 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9152 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30241 (0x7621) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7621 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=7621 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7621 name: srvsvc len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7621 min=1024 max=1024 nread=68 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9152 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xa0 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 31 of length 164 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9216 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 76 (0x4C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 76 (0x4C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30241 (0x7621) smb_bcc=93 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=76 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7621 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=7621 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 7621) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7621 name: srvsvc open: Yes len: 76 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 004c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000034 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0015 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\srvsvc [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: srvsvc op 0x15 - api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[11].fn == 0x8123830 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_srv_get_info [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr_srv_name : 00020000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 uni_max_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c uni_str_len: 0000000f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0010 buffer : \.\.1.9.2...1.6.8...1...1.0... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 switch_value : 00000065 [2007/03/01 22:16:39, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_srv_get_info(1212) srv_net_srv_get_info: 1212 [2007/03/01 22:16:39, 5] rpc_parse/parse_srv.c:init_srv_info_101(2809) init_srv_info_101 [2007/03/01 22:16:39, 5] rpc_parse/parse_srv.c:init_srv_r_net_srv_get_info(3044) init_srv_r_net_srv_get_info [2007/03/01 22:16:39, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_srv_get_info(1257) srv_net_srv_get_info: 1257 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_srv_get_info [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_info_ctr ctr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 switch_value: 00000065 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 ptr_srv_ctr : 00000001 [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_info_101 sv101 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 platform_id : 000001f4 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c ptr_name : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 ver_major : 00000004 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0014 ver_minor : 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 srv_type : 00009a03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c ptr_comment : 00000001 [2007/03/01 22:16:39, 8] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_unistr2 uni_name [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 uni_max_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0028 uni_str_len: 00000009 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 002c buffer : E.G.-.D.R.E.A.M... [2007/03/01 22:16:39, 8] rpc_parse/parse_prs.c:prs_debug(82) 00003e smb_io_unistr2 uni_comment [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0040 uni_max_len: 0000001a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0044 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0048 uni_str_len: 0000001a [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 004c buffer : D.r.e.a.m.B.O.X. .n.e.t.w.o.r.k. .s.e.r.v.i.c.e.s... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0080 status: WERR_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called srvsvc successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 208 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7621 name: srvsvc len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 009c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000084 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..156] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=212 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9216 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 156 (0x9C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 156 (0x9C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=157 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 32 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9280 smt_wct=3 smb_vwv[ 0]=30241 (0x7621) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7621 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name srvsvc pnum=7621 (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:7621 [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name srvsvc pnum=7621 (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9280 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 33 of length 104 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9344 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=17 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \winreg. [2007/03/01 22:16:39, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe winreg opening. [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested winreg (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe winreg (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe winreg with handle 7622 (pipes_open=1) [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name winreg pnum=7622 [2007/03/01 22:16:39, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \winreg [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9344 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8704 (0x2200) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x12b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 34 of length 303 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=299 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9408 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30242 (0x7622) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 235 (0xEB) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 235 (0xEB) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=236 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7622 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7622 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7622 name: winreg open: Yes len: 235 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 07 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 00eb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 006f [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 338cd001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 2244 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 31f1 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : aa aa [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 90 00 38 00 10 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 338cd001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 2244 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 31f1 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : aa aa [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 90 00 38 00 10 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_rpc_hdr_auth [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0064 auth_type : 09 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0065 auth_level : 06 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0066 auth_pad_len : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0067 auth_reserved: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0068 auth_context_id: 00000000 [2007/03/01 22:16:39, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(1006) api_pipe_bind_req: unknown auth type 9 requested. [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0012 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0010 reject code: 0000 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7622 nwritten=235 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9408 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 235 (0xEB) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 35 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9472 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30242 (0x7622) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7622 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7622 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7622 name: winreg len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7622 min=1024 max=1024 nread=18 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=77 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9472 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 18 (0x12) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=18 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 36 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9536 smt_wct=3 smb_vwv[ 0]=30242 (0x7622) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7622 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7622 (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:7622 [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name winreg pnum=7622 (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9536 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 37 of length 104 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9600 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=17 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] smbd/nttrans.c:nt_open_pipe(330) nt_open_pipe: Opening pipe \winreg. [2007/03/01 22:16:39, 3] smbd/nttrans.c:nt_open_pipe(351) nt_open_pipe: Known pipe winreg opening. [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested winreg (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe winreg (pipes_open=0) [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe winreg with handle 7623 (pipes_open=1) [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name winreg pnum=7623 [2007/03/01 22:16:39, 5] smbd/nttrans.c:do_ntcreate_pipe_open(400) do_ntcreate_pipe_open: open pipe = \winreg [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9600 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8960 (0x2300) smb_vwv[ 3]= 374 (0x176) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xb4 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 38 of length 184 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9664 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30243 (0x7623) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBwriteX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7623 name: winreg open: Yes len: 116 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0b [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0074 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(880) api_pipe_bind_req: decode request. 880 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(891) api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0008 num_contexts: 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000c context_id : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 000e num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 data : 338cd001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 data : 2244 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 data : 31f1 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0018 data : aa aa [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 001a data : 90 00 38 00 10 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0028 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 002a data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002c data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002e data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0034 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0038 context_id : 0001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 003a num_transfer_syntaxes: 01 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 00003b smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 003c data : 338cd001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0040 data : 2244 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0042 data : 31f1 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0044 data : aa aa [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0046 data : 90 00 38 00 10 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 004c version: 00000001 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0050 data : 6cb71c2c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0054 data : 9812 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0056 data : 4540 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0058 data : 01 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 005a data : 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0060 version: 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1030) api_pipe_bind_req: make response. 1030 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe.c:check_bind_req(765) check_bind_req for \PIPE\winreg [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0000 max_tsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0002 max_rsize: 10b8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 assoc_gid: 000053f0 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 len: 000d [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000a str: \PIPE\winreg. [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0018 num_results: 01 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001c result : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 001e reason : 0000 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 data : 8a885d04 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0024 data : 1ceb [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0026 data : 11c9 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 0028 data : 9f e8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 002a data : 08 00 2b 10 48 60 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0030 version: 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 0c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0044 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7623 nwritten=116 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9664 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 116 (0x74) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x3b [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 39 of length 63 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9728 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30243 (0x7623) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7623 name: winreg len: 1024 [2007/03/01 22:16:39, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7623 min=1024 max=1024 nread=68 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=9728 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x78 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 40 of length 124 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=120 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9792 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 36 (0x24) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30243 (0x7623) smb_bcc=53 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=36 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "winreg" (pnum 7623) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7623 name: winreg open: Yes len: 36 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 0000000c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0002 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 118 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: winreg op 0x2 - api_rpcTNP: rpc command: REG_OPEN_HKLM [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[3].fn == 0x81136f8 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_q_open_hive [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 ptr: 00020000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 server: fd20 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0008 access: 02000000 [2007/03/01 22:16:39, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:39, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-7 [2007/03/01 22:16:39, 7] rpc_server/srv_reg_nt.c:open_registry_key(133) open_registry_key: name = [NULL][HKLM] [2007/03/01 22:16:39, 4] rpc_server/srv_lsa_hnd.c:create_policy_hnd(142) Opened policy hnd[1] [000] 00 00 00 00 02 00 00 00 00 00 00 00 B7 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:39, 7] rpc_server/srv_reg_nt.c:open_registry_key(200) open_registry_key: exit [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_r_open_hive [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 02000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b7 42 e7 45 a9 14 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0014 status: WERR_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called winreg successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 510 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7623 name: winreg len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0030 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000001 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000018 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..48] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9792 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x80 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 41 of length 132 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9856 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30243 (0x7623) smb_bcc=61 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=44 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "winreg" (pnum 7623) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7623 name: winreg open: Yes len: 44 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 002c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000002 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000014 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 001a [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: winreg op 0x1a - api_rpcTNP: rpc command: REG_GETVERSION [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[12].fn == 0x8113fe4 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_q_getversion [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 02000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b7 42 e7 45 a9 14 00 00 [2007/03/01 22:16:39, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 B7 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_r_getversion [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 win_version: 00000005 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0004 status: WERR_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called winreg successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7623 name: winreg len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0020 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000002 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000008 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..32] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9856 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0xe4 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 42 of length 232 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=228 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9920 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 144 (0x90) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 144 (0x90) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30243 (0x7623) smb_bcc=161 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=144 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "winreg" (pnum 7623) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7623 name: winreg open: Yes len: 144 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0090 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000003 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000078 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 000f [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: winreg op 0xf - api_rpcTNP: rpc command: REG_OPEN_ENTRY [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[1].fn == 0x81139ec [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_q_open_entry [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 02000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b7 42 e7 45 a9 14 00 00 [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000014 prs_unistr4 name [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 length: 0046 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0016 size: 0046 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0018 ptr: 00020000 [2007/03/01 22:16:39, 7] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_unistr2 name [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 001c uni_max_len: 00000023 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0020 offset : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0024 uni_str_len: 00000023 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841) 0028 buffer : S.O.F.T.W.A.R.E.\.M.i.c.r.o.s.o.f.t.\.S.c.h.e.d.u.l.i.n.g.A.g.e.n.t... [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0070 unknown_0 : 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0074 access: 00020019 [2007/03/01 22:16:39, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 B7 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:39, 7] rpc_server/srv_reg_nt.c:open_registry_key(133) open_registry_key: name = [HKLM][SOFTWARE\Microsoft\SchedulingAgent] [2007/03/01 22:16:39, 5] registry/reg_db.c:regdb_fetch_keys(379) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\SOFTWARE\Microsoft\SchedulingAgent] [2007/03/01 22:16:39, 7] rpc_server/srv_reg_nt.c:open_registry_key(200) open_registry_key: exit [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_r_open_entry [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd handle [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: 00 00 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0014 status: WERR_BADFILE [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called winreg successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 86 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7623 name: winreg len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0030 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000003 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000018 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..48] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9920 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x80 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 43 of length 132 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9984 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 44 (0x2C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 44 (0x2C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30243 (0x7623) smb_bcc=61 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBtrans (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=44 params=0 setup=2 [2007/03/01 22:16:39, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2007/03/01 22:16:39, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2007/03/01 22:16:39, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "winreg" (pnum 7623) [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(853) write_to_pipe: 7623 name: winreg open: Yes len: 44 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 002c [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000004 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 alloc_hint: 00000014 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0004 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0006 opnum : 0005 [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_pipe_request(1509) Requested \PIPE\winreg [2007/03/01 22:16:39, 4] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: winreg op 0x5 - api_rpcTNP: rpc command: REG_CLOSE [2007/03/01 22:16:39, 6] rpc_server/srv_pipe.c:api_rpcTNP(1569) api_rpc_cmds[0].fn == 0x81135f0 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_q_close [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 02000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: b7 42 e7 45 a9 14 00 00 [2007/03/01 22:16:39, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 B7 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:39, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 B7 42 E7 45 ........ .....B.E [010] A9 14 00 00 .... [2007/03/01 22:16:39, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200) Closed policy [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 reg_io_r_close [2007/03/01 22:16:39, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0000 data1: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0004 data2: 00000000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 data3: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a data4: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8s(756) 000c data5: 00 00 00 00 00 00 00 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_werror(729) 0014 status: WERR_OK [2007/03/01 22:16:39, 5] rpc_server/srv_pipe.c:api_rpcTNP(1590) api_rpcTNP: called winreg successfully [2007/03/01 22:16:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(543) free_pipe_context: destroying talloc pool of size 0 [2007/03/01 22:16:39, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(910) read_from_pipe: 7623 name: winreg len: 1024 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0000 major : 05 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0001 minor : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0002 pkt_type : 02 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0003 flags : 03 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0004 pack_type0: 10 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0005 pack_type1: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0006 pack_type2: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0007 pack_type3: 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0008 frag_len : 0030 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 000a auth_len : 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 000c call_id : 00000004 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint32(669) 0010 alloc_hint: 00000018 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint16(640) 0014 context_id: 0000 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0016 cancel_ct : 00 [2007/03/01 22:16:39, 5] rpc_parse/parse_prs.c:prs_uint8(580) 0017 reserved : 00 [2007/03/01 22:16:39, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..48] [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=9984 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/03/01 22:16:39, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:39, 3] smbd/process.c:process_smb(1114) Transaction 44 of length 45 [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10048 smt_wct=3 smb_vwv[ 0]=30243 (0x7623) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:39, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5289) conn 0x835cc08 [2007/03/01 22:16:39, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1169) search for pipe pnum=7623 [2007/03/01 22:16:39, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1173) pipe name winreg pnum=7623 (pipes_open=1) [2007/03/01 22:16:39, 5] smbd/pipes.c:reply_pipe_close(272) reply_pipe_close: pnum:7623 [2007/03/01 22:16:39, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1082) closed pipe name winreg pnum=7623 (pipes_open=0) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:39, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10048 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:42, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x102 [2007/03/01 22:16:42, 3] smbd/process.c:process_smb(1114) Transaction 45 of length 262 [2007/03/01 22:16:42, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:42, 5] lib/util.c:show_msg(464) size=258 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10112 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 200 (0xC8) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 5289 (0x14A9) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=139 [2007/03/01 22:16:42, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5289) conn 0x0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[]\[]@[192.168.1.251] [2007/03/01 22:16:42, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:42, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:42, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:42, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:42, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:42, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:42, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:42, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:42, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:42, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:42, 5] lib/util.c:show_msg(464) size=258 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10112 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 258 (0x102) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 0 (0x0) smb_bcc=47 [2007/03/01 22:16:42, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5289) conn 0x0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:42, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [IPC$] [2007/03/01 22:16:42, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service ipc$ [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user IPC$ [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is ipc$ [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is IPC$ [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in ipc$ [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [IPC$]! [2007/03/01 22:16:42, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:42, 5] lib/util.c:dump_data(2053) [000] 2E 2F 25 16 D6 C7 85 F0 ./%..... [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info_for_reply(369) make_user_info_for_reply: User passwords not in encrypted format. [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:42, 5] lib/util.c:dump_data(2053) [000] 2E 2F 25 16 D6 C7 85 F0 ./%..... [2007/03/01 22:16:42, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:42, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:42, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:42, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:42, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:42, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:42, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:42, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:42, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:42, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:42, 5] lib/util.c:dump_data(2053) [000] 88 CD 4A A9 97 A1 46 3A ..J...F: [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info_for_reply(369) make_user_info_for_reply: User passwords not in encrypted format. [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:42, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:42, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:42, 5] lib/util.c:dump_data(2053) [000] 88 CD 4A A9 97 A1 46 3A ..J...F: [2007/03/01 22:16:42, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:42, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:42, 3] libsmb/ntlm_check.c:ntlm_password_check(356) ntlm_password_check: NEITHER LanMan nor NT password supplied for user root [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:42, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:42, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:42, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:42, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:42, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:42, 3] smbd/service.c:make_connection_snum(477) Connect path is '/tmp' for service [IPC$] [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:42, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-501 [2007/03/01 22:16:42, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:42, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:42, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:42, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2007/03/01 22:16:42, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:42, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:42, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:42, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:42, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:42, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:42, 3] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service IPC$ initially as user root (uid=0, gid=0) (pid 5289) [2007/03/01 22:16:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:42, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:42, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:42, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=IPC$ [2007/03/01 22:16:42, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:42, 5] lib/util.c:show_msg(464) size=116 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=2 smb_pid=65279 smb_uid=0 smb_mid=10112 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:42, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x148 [2007/03/01 22:16:42, 3] smbd/process.c:process_smb(1114) Transaction 46 of length 332 [2007/03/01 22:16:42, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:42, 5] lib/util.c:show_msg(464) size=328 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10176 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 238 (0xEE) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 5289 (0x14A9) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=177 [2007/03/01 22:16:42, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5289) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[SERVER] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[SERVER]\[Administrator]@[192.168.1.251] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [Administrator]! [2007/03/01 22:16:43, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=328 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10176 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 328 (0x148) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 24 (0x18) smb_bcc=79 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5289) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [HARDDISK] [2007/03/01 22:16:43, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(278) Trying _Get_Pwnam(), username as uppercase is HARDDISK [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [Harddisk]! [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(356) ntlm_password_check: NEITHER LanMan nor NT password supplied for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 46 8D 4C 49 8C 12 18 BE F.LI.... [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(371) ntlm_password_check: NO LanMan password set for user root (and no NT password supplied) [2007/03/01 22:16:43, 4] libsmb/ntlm_check.c:ntlm_password_check(392) ntlm_password_check: LM password check failed for user, no NT password root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/service.c:make_connection_snum(477) Connect path is '/hdd' for service [Harddisk] [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-501 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for Harddisk [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:43, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming Harddisk 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 1] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service Harddisk initially as user root (uid=0, gid=0) (pid 5289) [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=HARDDISK [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=122 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=3 smb_pid=65279 smb_uid=0 smb_mid=10176 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x4c [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 47 of length 80 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=3308 smb_uid=0 smb_mid=10240 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 5289) conn 0x835f918 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/vfs.c:vfs_ChDir(737) vfs_ChDir to /hdd [2007/03/01 22:16:43, 3] smbd/trans2.c:call_trans2qfilepathinfo(2820) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2007/03/01 22:16:43, 3] smbd/trans2.c:call_trans2qfilepathinfo(2871) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/trans2.c:call_trans2qfilepathinfo(3076) SMB_QFBI - create: Wed Feb 28 12:33:54 2007 access: Thu Mar 1 22:04:40 2007 write: Wed Feb 28 12:33:54 2007 change: Wed Feb 28 12:33:54 2007 mode: 10 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49217 smb_tid=3 smb_pid=3308 smb_uid=0 smb_mid=10240 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x56 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 48 of length 90 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=3308 smb_uid=0 smb_mid=10304 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=21 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 5289) conn 0x835f918 [2007/03/01 22:16:43, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:43, 3] smbd/trans2.c:call_trans2findfirst(1629) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "*" [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = *, dirpath = , start = * [2007/03/01 22:16:43, 5] smbd/trans2.c:call_trans2findfirst(1683) dir=./, mask = * [2007/03/01 22:16:43, 5] smbd/dir.c:dptr_create(390) dptr_create dir=./ [2007/03/01 22:16:43, 3] smbd/dir.c:dptr_create(509) creating new dirptr 256 for path ./, expect_close = 1 [2007/03/01 22:16:43, 4] smbd/trans2.c:call_trans2findfirst(1740) dptr_num is 256, wcard = *, attr = 22 [2007/03/01 22:16:43, 8] smbd/trans2.c:call_trans2findfirst(1745) dirpath=<./> dontdescend=<> [2007/03/01 22:16:43, 8] smbd/trans2.c:get_lanman2_dir_entry(1077) get_lanman2_dir_entry:readdir on dirptr 0x835f2c0 now at offset 0 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./. [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/trans2.c:get_lanman2_dir_entry(1167) get_lanman2_dir_entry found ./. fname=. [2007/03/01 22:16:43, 8] smbd/trans2.c:get_lanman2_dir_entry(1077) get_lanman2_dir_entry:readdir on dirptr 0x835f2c0 now at offset -2147483648 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./.. [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/trans2.c:get_lanman2_dir_entry(1167) get_lanman2_dir_entry found ./.. fname=.. smbd: relocation error: smbd: symbol telldir, version GLIBC_2.0 not defined in file libc.so.6 with link time reference [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/oplock.c:init_oplocks(1380) open_oplock_ipc: opening loopback UDP socket. [2007/03/01 22:16:43, 3] smbd/oplock.c:init_oplocks(1411) open_oplock ipc: pid = 5290, global_oplock_port = 1045 [2007/03/01 22:16:43, 4] lib/time.c:get_serverzone(125) Serverzone is -3600 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x85 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 0 of length 137 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBnegprot (pid 5290) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN1.0] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [Windows for Workgroups 3.1a] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LM1.2X002] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN2.1] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [NT LM 0.12] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming 0 [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 91 D8 34 D7 FB 66 2A EB ..4..f*. [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_nt1(331) not using SPNEGO [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(559) Selected protocol NT LM 0.12 [2007/03/01 22:16:43, 5] smbd/negprot.c:reply_negprot(565) negprot index=5 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=97 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12802 (0x3202) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=43520 (0xAA00) smb_vwv[ 8]= 20 (0x14) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]= 367 (0x16F) smb_vwv[13]=18153 (0x46E9) smb_vwv[14]=51036 (0xC75C) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 2303 (0x8FF) smb_bcc=28 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x102 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 1 of length 262 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=258 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10368 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 200 (0xC8) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 5290 (0x14AA) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=139 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5290) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:43, 2] smbd/sesssetup.c:setup_new_vc_session(704) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[]\[]@[192.168.1.251] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=258 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10368 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 258 (0x102) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 0 (0x0) smb_bcc=47 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5290) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [IPC$] [2007/03/01 22:16:43, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service ipc$ [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user IPC$ [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is ipc$ [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is IPC$ [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in ipc$ [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [IPC$]! [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 89 87 55 18 31 A1 C8 CD ..U.1... [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_for_reply(369) make_user_info_for_reply: User passwords not in encrypted format. [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 89 87 55 18 31 A1 C8 CD ..U.1... [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(356) ntlm_password_check: NEITHER LanMan nor NT password supplied for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/service.c:make_connection_snum(477) Connect path is '/tmp' for service [IPC$] [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:43, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service IPC$ initially as user root (uid=0, gid=0) (pid 5290) [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=IPC$ [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=116 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10368 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x148 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 2 of length 332 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=328 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10433 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 238 (0xEE) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 5290 (0x14AA) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=177 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5290) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[SERVER] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[SERVER]\[Administrator]@[192.168.1.251] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [Administrator]! [2007/03/01 22:16:43, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=328 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10433 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 328 (0x148) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 24 (0x18) smb_bcc=79 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5290) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [HARDDISK] [2007/03/01 22:16:43, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(278) Trying _Get_Pwnam(), username as uppercase is HARDDISK [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [Harddisk]! [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 91 D8 34 D7 FB 66 2A EB ..4..f*. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(356) ntlm_password_check: NEITHER LanMan nor NT password supplied for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[root] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for root (root) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for root's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for root's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[root]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[root]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 91 D8 34 D7 FB 66 2A EB ..4..f*. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(189) ntlm_password_check: NO NT password stored for user root. [2007/03/01 22:16:43, 3] libsmb/ntlm_check.c:ntlm_password_check(371) ntlm_password_check: NO LanMan password set for user root (and no NT password supplied) [2007/03/01 22:16:43, 4] libsmb/ntlm_check.c:ntlm_password_check(392) ntlm_password_check: LM password check failed for user, no NT password root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 6] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(828) mod_smbfilepwd_entry: entry exists for user root [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 91 D8 34 D7 FB 66 2A EB ..4..f*. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 91 D8 34 D7 FB 66 2A EB ..4..f*. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/service.c:make_connection_snum(477) Connect path is '/hdd' for service [Harddisk] [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-501 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for Harddisk [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:43, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming Harddisk 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 1] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service Harddisk initially as user root (uid=0, gid=0) (pid 5290) [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=HARDDISK [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=122 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=2 smb_pid=65279 smb_uid=0 smb_mid=10433 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x56 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 3 of length 90 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=86 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3308 smb_uid=0 smb_mid=10497 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=33024 (0x8100) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=3 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5290) conn 0x835e930 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/vfs.c:vfs_ChDir(737) vfs_ChDir to /hdd [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2007/03/01 22:16:43, 3] smbd/dosmode.c:unix_mode(121) unix_mode(.) returning 0744 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/files.c:file_new(139) allocated file structure 8753, fnum = 12849 (1 used) [2007/03/01 22:16:43, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2007/03/01 22:16:43, 5] smbd/files.c:file_free(459) freed files structure 12849 (0 used) [2007/03/01 22:16:43, 5] smbd/open.c:open_directory(1935) open_directory: opening directory ., access_mask = 0x81, share_access = 0x3 create_options = 0x0, create_disposition = 0x1 [2007/03/01 22:16:43, 5] smbd/files.c:file_new(139) allocated file structure 8754, fnum = 12850 (1 used) [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 12850, open name = . [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=2 smb_pid=3308 smb_uid=0 smb_mid=10497 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=12800 (0x3200) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=29117 (0x71BD) smb_vwv[ 7]=11347 (0x2C53) smb_vwv[ 8]=51035 (0xC75B) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 367 (0x16F) smb_vwv[11]=18153 (0x46E9) smb_vwv[12]=51036 (0xC75C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=29117 (0x71BD) smb_vwv[15]=11347 (0x2C53) smb_vwv[16]=51035 (0xC75B) smb_vwv[17]= 1 (0x1) smb_vwv[18]=29117 (0x71BD) smb_vwv[19]=11347 (0x2C53) smb_vwv[20]=51035 (0xC75B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x56 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 4 of length 90 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3308 smb_uid=0 smb_mid=10560 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=21 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 5290) conn 0x835e930 [2007/03/01 22:16:43, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:43, 3] smbd/trans2.c:call_trans2findfirst(1629) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 0x104, max_data_bytes = 16384 [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "*" [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = *, dirpath = , start = * [2007/03/01 22:16:43, 5] smbd/trans2.c:call_trans2findfirst(1683) dir=./, mask = * [2007/03/01 22:16:43, 5] smbd/dir.c:dptr_create(390) dptr_create dir=./ [2007/03/01 22:16:43, 3] smbd/dir.c:dptr_create(509) creating new dirptr 256 for path ./, expect_close = 1 [2007/03/01 22:16:43, 4] smbd/trans2.c:call_trans2findfirst(1740) dptr_num is 256, wcard = *, attr = 22 [2007/03/01 22:16:43, 8] smbd/trans2.c:call_trans2findfirst(1745) dirpath=<./> dontdescend=<> [2007/03/01 22:16:43, 8] smbd/trans2.c:get_lanman2_dir_entry(1077) get_lanman2_dir_entry:readdir on dirptr 0x835d300 now at offset 0 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./. [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/trans2.c:get_lanman2_dir_entry(1167) get_lanman2_dir_entry found ./. fname=. [2007/03/01 22:16:43, 8] smbd/trans2.c:get_lanman2_dir_entry(1077) get_lanman2_dir_entry:readdir on dirptr 0x835d300 now at offset -2147483648 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: ./.. [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/trans2.c:get_lanman2_dir_entry(1167) get_lanman2_dir_entry found ./.. fname=.. smbd: relocation error: smbd: symbol telldir, version GLIBC_2.0 not defined in file libc.so.6 with link time reference [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_KEEPALIVE = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_REUSEADDR = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_BROADCAST = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_NODELAY = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPCNT = 9 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPIDLE = 7200 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option TCP_KEEPINTVL = 75 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_LOWDELAY = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option IPTOS_THROUGHPUT = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDBUF = 16384 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVBUF = 43689 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVLOWAT = 1 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_SNDTIMEO = 0 [2007/03/01 22:16:43, 5] lib/util_sock.c:print_socket_options(203) socket option SO_RCVTIMEO = 0 [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/oplock.c:init_oplocks(1380) open_oplock_ipc: opening loopback UDP socket. [2007/03/01 22:16:43, 3] smbd/oplock.c:init_oplocks(1411) open_oplock ipc: pid = 5291, global_oplock_port = 1045 [2007/03/01 22:16:43, 4] lib/time.c:get_serverzone(125) Serverzone is -3600 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x85 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 0 of length 137 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBnegprot (pid 5291) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN1.0] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [Windows for Workgroups 3.1a] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LM1.2X002] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [LANMAN2.1] [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(466) Requested protocol [NT LM 0.12] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming 0 [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2007/03/01 22:16:43, 5] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2007/03/01 22:16:43, 5] auth/auth.c:get_ntlm_challenge(136) challenge is: [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 04 5A 6A C6 E0 43 B7 0F .Zj..C.. [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_nt1(331) not using SPNEGO [2007/03/01 22:16:43, 3] smbd/negprot.c:reply_negprot(559) Selected protocol NT LM 0.12 [2007/03/01 22:16:43, 5] smbd/negprot.c:reply_negprot(565) negprot index=5 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=97 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12802 (0x3202) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=43776 (0xAB00) smb_vwv[ 8]= 20 (0x14) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]= 367 (0x16F) smb_vwv[13]=18153 (0x46E9) smb_vwv[14]=51036 (0xC75C) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 2303 (0x8FF) smb_bcc=28 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x148 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 1 of length 332 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=328 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10624 smt_wct=13 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 238 (0xEE) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 5291 (0x14AB) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1 (0x1) smb_vwv[ 8]= 1 (0x1) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 212 (0xD4) smb_vwv[12]= 0 (0x0) smb_bcc=177 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBsesssetupX (pid 5291) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751) wct=13 flg2=0xc807 [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897) Domain=[SERVER] NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2007/03/01 22:16:43, 2] smbd/sesssetup.c:setup_new_vc_session(704) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/03/01 22:16:43, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912) sesssetupX:name=[SERVER]\[Administrator]@[192.168.1.251] [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is administrator [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [Administrator]! [2007/03/01 22:16:43, 3] smbd/sesssetup.c:check_guest_password(115) Got anonymous request [2007/03/01 22:16:43, 5] auth/auth.c:make_auth_context_subsystem(495) Making default auth method list for security=share, encrypt passwords = yes [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match guest [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method guest has a valid init [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(389) load_auth_module: Attempting to find an auth method to match sam [2007/03/01 22:16:43, 5] auth/auth.c:load_auth_module(414) load_auth_module: auth method sam has a valid init [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for () [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for 's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for 's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 00 00 00 00 00 00 00 00 ........ [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(307) check_ntlm_password: guest authentication for user [] -> [] -> [root] succeeded [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 6] param/loadparm.c:lp_file_list_changed(2834) lp_file_list_changed() file /var/etc/samba/smb.conf -> /var/etc/samba/smb.conf last mod_time: Thu Mar 1 21:49:31 2007 [2007/03/01 22:16:43, 3] smbd/process.c:chain_reply(1254) Chained message [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=328 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=10624 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 328 (0x148) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 24 (0x18) smb_bcc=79 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5291) conn 0x0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/reply.c:reply_tcon_and_X(618) Client requested device type [] for share [HARDDISK] [2007/03/01 22:16:43, 5] smbd/service.c:make_connection(811) making a connection to 'normal' service harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(269) Trying _Get_Pwnam(), username as given is Harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(278) Trying _Get_Pwnam(), username as uppercase is HARDDISK [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(286) Checking combinations of 0 uppercase letters in harddisk [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals didn't find user [Harddisk]! [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 04 5A 6A C6 E0 43 B7 0F .Zj..C.. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info_map(191) make_user_info_map: Mapping user [HAUS-NETZ]\[administrator] from workstation [192.168.1.251] [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(99) attempting to make a user_info for administrator (administrator) [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(109) making strings for administrator's user_info struct [2007/03/01 22:16:43, 5] auth/auth_util.c:make_user_info(151) making blobs for administrator's user_info struct [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [HAUS-NETZ]\[administrator]@[192.168.1.251] with the new password interface [2007/03/01 22:16:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EG-DREAM]\[administrator]@[192.168.1.251] [2007/03/01 22:16:43, 5] lib/util.c:dump_data(2053) [000] 04 5A 6A C6 E0 43 B7 0F .Zj..C.. [2007/03/01 22:16:43, 8] lib/util.c:is_myname(1874) is_myname("EG-DREAM") returns 1 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(537) getsmbfilepwent: end of file reached. [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] auth/auth_sam.c:check_sam_security(260) check_sam_security: Couldn't find user 'administrator' in passdb. [2007/03/01 22:16:43, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: sam authentication for user [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [administrator] -> [administrator] FAILED with error NT_STATUS_NO_SUCH_USER [2007/03/01 22:16:43, 5] auth/auth_util.c:free_user_info(1361) attempting to free (and zero) a user_info structure [2007/03/01 22:16:43, 5] auth/auth_util.c:free_server_info(1387) attempting to free (and zero) a server_info structure [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/password.c:authorise_login(600) authorise_login: ACCEPTED: guest account and guest ok (root) [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_alloc(313) Finding user root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(262) Trying _Get_Pwnam(), username as lowercase is root [2007/03/01 22:16:43, 5] lib/username.c:Get_Pwnam_internals(290) Get_Pwnam_internals did find user [root]! [2007/03/01 22:16:43, 3] smbd/service.c:make_connection_snum(477) Connect path is '/hdd' for service [Harddisk] [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:get_current_groups(171) get_current_groups: user is in 2 groups: 0, 65534 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 3] smbd/uid.c:push_conn_ctx(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(486) getsmbfilepwent: returning passwd entry for user root, uid 0 [2007/03/01 22:16:43, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(301) endsmbfilepwent_internal: closed password file. [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 4] lib/substitute.c:automount_server(337) Home server: eg-dream [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-4027867706-2309654463-954382609-1001 [2007/03/01 22:16:43, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 65534 -> S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for Harddisk [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(250) [2007/03/01 22:16:43, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-4027867706-2309654463-954382609-501 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-1001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-4027867706-2309654463-954382609-132069 [2007/03/01 22:16:43, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/03/01 22:16:43, 3] smbd/vfs.c:vfs_init_default(215) Initialising default vfs hooks [2007/03/01 22:16:43, 5] smbd/connection.c:claim_connection(170) claiming Harddisk 0 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 1] smbd/service.c:make_connection_snum(662) 192.168.1.251 (192.168.1.251) connect to service Harddisk initially as user root (uid=0, gid=0) (pid 5291) [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(452) NT user token: (NULL) [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_root_user(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 3] smbd/reply.c:reply_tcon_and_X(666) tconX service=HARDDISK [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=122 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10624 smt_wct=3 smb_vwv[ 0]= 117 (0x75) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 1 (0x1) smb_bcc=57 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x54 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 2 of length 88 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10688 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 4096 (0x1000) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]=16484 (0x4064) smb_vwv[20]= 20 (0x14) smb_vwv[21]=12850 (0x3232) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBnttrans (pid 5291) conn 0x835cc08 [2007/03/01 22:16:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_nt_user_token(457) NT user token of user S-1-5-21-4027867706-2309654463-954382609-501 contains 6 SIDs SID[ 0]: S-1-5-21-4027867706-2309654463-954382609-501 SID[ 1]: S-1-5-21-4027867706-2309654463-954382609-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-5-21-4027867706-2309654463-954382609-132069 SE_PRIV 0x0 0x0 0x0 0x0 [2007/03/01 22:16:43, 5] auth/auth_util.c:debug_unix_user_token(473) UNIX token of user 0 Primary group is 0 and contains 2 supplementary groups Group[ 0]: 0 Group[ 1]: 65534 [2007/03/01 22:16:43, 5] smbd/uid.c:change_to_user(304) change_to_user uid=(0,0) gid=(0,0) [2007/03/01 22:16:43, 4] smbd/vfs.c:vfs_ChDir(737) vfs_ChDir to /hdd [2007/03/01 22:16:43, 3] smbd/error.c:error_packet(147) error packet at smbd/nttrans.c(2188) cmd=160 (SMBnttrans) NT_STATUS_INVALID_HANDLE [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa0 smb_rcls=8 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=49217 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10688 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x58 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 3 of length 92 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=88 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10752 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 512 (0x200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 4096 (0x1000) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]=32768 (0x8000) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=5 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 5291) conn 0x835cc08 [2007/03/01 22:16:43, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "" [2007/03/01 22:16:43, 5] smbd/filename.c:unix_convert(137) conversion finished "" -> . [2007/03/01 22:16:43, 3] smbd/dosmode.c:unix_mode(121) unix_mode(.) returning 0744 [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/files.c:file_new(139) allocated file structure 8752, fnum = 12848 (1 used) [2007/03/01 22:16:43, 4] smbd/open.c:open_file_ntcreate(1580) calling open_file with flags=0x0 flags2=0x0 mode=0744 [2007/03/01 22:16:43, 5] smbd/files.c:file_free(459) freed files structure 12848 (0 used) [2007/03/01 22:16:43, 5] smbd/open.c:open_directory(1935) open_directory: opening directory ., access_mask = 0x100080, share_access = 0x3 create_options = 0x0, create_disposition = 0x1 [2007/03/01 22:16:43, 5] smbd/files.c:file_new(139) allocated file structure 8753, fnum = 12849 (1 used) [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(294) dos_mode: . [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning d [2007/03/01 22:16:43, 8] smbd/dosmode.c:dos_mode(327) dos_mode returning d [2007/03/01 22:16:43, 5] smbd/nttrans.c:reply_ntcreate_and_X(910) reply_ntcreate_and_X: fnum = 12849, open name = . [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10752 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=12544 (0x3100) smb_vwv[ 3]= 306 (0x132) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]=29117 (0x71BD) smb_vwv[ 7]=11347 (0x2C53) smb_vwv[ 8]=51035 (0xC75B) smb_vwv[ 9]=32769 (0x8001) smb_vwv[10]= 367 (0x16F) smb_vwv[11]=18153 (0x46E9) smb_vwv[12]=51036 (0xC75C) smb_vwv[13]= 1 (0x1) smb_vwv[14]=29117 (0x71BD) smb_vwv[15]=11347 (0x2C53) smb_vwv[16]=51035 (0xC75B) smb_vwv[17]= 1 (0x1) smb_vwv[18]=29117 (0x71BD) smb_vwv[19]=11347 (0x2C53) smb_vwv[20]=51035 (0xC75B) smb_vwv[21]= 4097 (0x1001) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 0 (0x0) smb_vwv[32]= 1792 (0x700) smb_vwv[33]= 256 (0x100) smb_bcc=0 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x54 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 4 of length 88 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=84 smb_com=0xa0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10816 smt_wct=23 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 64 (0x40) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]=21504 (0x5400) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 1024 (0x400) smb_vwv[18]= 2 (0x2) smb_vwv[19]= 168 (0xA8) smb_vwv[20]= 9 (0x9) smb_vwv[21]=12849 (0x3231) smb_vwv[22]= 1 (0x1) smb_bcc=3 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBnttrans (pid 5291) conn 0x835cc08 [2007/03/01 22:16:43, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:43, 3] smbd/error.c:error_packet(147) error packet at smbd/nttrans.c(95) cmd=160 (SMBnttrans) NT_STATUS_NOT_A_REPARSE_POINT [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=35 smb_com=0xa0 smb_rcls=117 smb_reh=2 smb_err=49152 smb_flg=136 smb_flg2=49217 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10816 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:43, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x29 [2007/03/01 22:16:43, 3] smbd/process.c:process_smb(1114) Transaction 5 of length 45 [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10880 smt_wct=3 smb_vwv[ 0]=12849 (0x3231) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2007/03/01 22:16:43, 3] smbd/process.c:switch_message(900) switch message SMBclose (pid 5291) conn 0x835cc08 [2007/03/01 22:16:43, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:43, 3] smbd/reply.c:reply_close(3233) close directory fnum=12849 [2007/03/01 22:16:43, 5] smbd/files.c:file_free(459) freed files structure 12849 (0 used) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:43, 5] lib/util.c:show_msg(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=1 smb_pid=65279 smb_uid=0 smb_mid=10880 smt_wct=0 smb_bcc=0 [2007/03/01 22:16:45, 6] smbd/process.c:process_smb(1113) got message type 0x0 of len 0x64 [2007/03/01 22:16:45, 3] smbd/process.c:process_smb(1114) Transaction 6 of length 104 [2007/03/01 22:16:45, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:45, 5] lib/util.c:show_msg(464) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10944 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=35 [2007/03/01 22:16:45, 3] smbd/process.c:switch_message(900) switch message SMBtrans2 (pid 5291) conn 0x835cc08 [2007/03/01 22:16:45, 4] smbd/uid.c:change_to_user(212) change_to_user: Skipping user change - already user [2007/03/01 22:16:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(2820) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2007/03/01 22:16:45, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "desktop.ini" [2007/03/01 22:16:45, 5] smbd/filename.c:unix_convert(175) unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini [2007/03/01 22:16:45, 3] smbd/trans2.c:call_trans2qfilepathinfo(2845) call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory) [2007/03/01 22:16:45, 3] smbd/error.c:error_packet(147) error packet at smbd/trans2.c(2590) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2007/03/01 22:16:45, 5] lib/util.c:show_msg(454) [2007/03/01 22:16:45, 5] lib/util.c:show_msg(464) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=49217 smb_tid=1 smb_pid=3308 smb_uid=0 smb_mid=10944 smt_wct=0 smb_bcc=0