Here is the log without truss. run as winbindd -d100
2003/08/01 10:57:34, 1] nsswitch/winbindd.c:main(819) winbindd version 2.2.8a started. Copyright The Samba Team 2000-2001 [2003/08/01 10:57:34, 3] param/loadparm.c:init_globals(1275) Initialising global parameters [2003/08/01 10:57:34, 3] param/params.c:pm_process(577) params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/smb.conf" [2003/08/01 10:57:34, 3] param/loadparm.c:do_section(3055) Processing section "[global]" doing parameter workgroup = THINKTANK doing parameter netbios name = TESTSMB [2003/08/01 10:57:34, 4] param/loadparm.c:handle_netbios_name(2352) handle_netbios_name: set global_myname to: TESTSMB doing parameter security = DOMAIN doing parameter encrypt passwords = Yes doing parameter allow trusted domains = No doing parameter null passwords = Yes doing parameter password server = testpdc doing parameter lanman auth = No doing parameter min protocol = NT1 doing parameter acl compatibility = winnt doing parameter name resolve order = wins host bcast doing parameter domain master = No doing parameter wins server = 205.54.128.114 [2003/08/01 10:57:34, 4] lib/wins_srv.c:wins_srv_load_list(139) wins_srv_load_list(): Building WINS server list: 205.54.128.114, 1 WINS server listed. doing parameter winbind uid = 10000-20000 doing parameter winbind gid = 10000-20000 [2003/08/01 10:57:34, 2] param/loadparm.c:do_section(3073) Processing section "[test]" doing parameter comment = just a test doing parameter path = /home2 doing parameter read only = No [2003/08/01 10:57:34, 4] param/loadparm.c:lp_load(3503) pm_process() returned Yes [2003/08/01 10:57:34, 7] param/loadparm.c:lp_servicenumber(3612) lp_servicenumber: couldn't find homes [2003/08/01 10:57:34, 3] param/loadparm.c:lp_add_ipc(2028) adding IPC service IPC$ [2003/08/01 10:57:34, 3] param/loadparm.c:lp_add_ipc(2028) adding IPC service ADMIN$ [2003/08/01 10:57:34, 10] param/loadparm.c:set_server_role(3449) set_server_role: ROLE_DOMAIN_MEMBER [2003/08/01 10:57:34, 2] lib/interface.c:add_interface(81) added interface ip=205.54.128.116 bcast=205.54.128.127 nmask=255.255.255.240 [2003/08/01 10:57:34, 6] lib/charset.c:codepage_initialise(336) codepage_initialise: client code page = 850 [2003/08/01 10:57:34, 5] lib/charset.c:load_client_codepage(194) load_client_codepage: loading codepage 850. Adding chars 0x85 0xb7 (l->u = True) (u->l = True) Adding chars 0xa0 0xb5 (l->u = True) (u->l = True) Adding chars 0x83 0xb6 (l->u = True) (u->l = True) Adding chars 0xc6 0xc7 (l->u = True) (u->l = True) Adding chars 0x84 0x8e (l->u = True) (u->l = True) Adding chars 0x86 0x8f (l->u = True) (u->l = True) Adding chars 0x91 0x92 (l->u = True) (u->l = True) Adding chars 0x87 0x80 (l->u = True) (u->l = True) Adding chars 0x8a 0xd4 (l->u = True) (u->l = True) Adding chars 0x82 0x90 (l->u = True) (u->l = True) Adding chars 0x88 0xd2 (l->u = True) (u->l = True) Adding chars 0x89 0xd3 (l->u = True) (u->l = True) Adding chars 0x8d 0xde (l->u = True) (u->l = True) Adding chars 0xa1 0xd6 (l->u = True) (u->l = True) Adding chars 0x8c 0xd7 (l->u = True) (u->l = True) Adding chars 0x8b 0xd8 (l->u = True) (u->l = True) Adding chars 0xd0 0xd1 (l->u = True) (u->l = True) Adding chars 0xa4 0xa5 (l->u = True) (u->l = True) Adding chars 0x95 0xe3 (l->u = True) (u->l = True) Adding chars 0xa2 0xe0 (l->u = True) (u->l = True) Adding chars 0x93 0xe2 (l->u = True) (u->l = True) Adding chars 0xe4 0xe5 (l->u = True) (u->l = True) Adding chars 0x94 0x99 (l->u = True) (u->l = True) Adding chars 0x9b 0x9d (l->u = True) (u->l = True) Adding chars 0x97 0xeb (l->u = True) (u->l = True) Adding chars 0xa3 0xe9 (l->u = True) (u->l = True) Adding chars 0x96 0xea (l->u = True) (u->l = True) Adding chars 0x81 0x9a (l->u = True) (u->l = True) Adding chars 0xec 0xed (l->u = True) (u->l = True) Adding chars 0xe7 0xe8 (l->u = True) (u->l = True) Adding chars 0x9c 0x0 (l->u = False) (u->l = False) [2003/08/01 10:57:34, 10] lib/util_unistr.c:load_dos_unicode_map(738) load_dos_unicode_map: 850 [2003/08/01 10:57:34, 5] lib/util_unistr.c:load_unicode_map(599) load_unicode_map: loading unicode map for codepage 850. [2003/08/01 10:57:34, 10] lib/util_unistr.c:load_unix_unicode_map(755) load_unix_unicode_map: ISO8859-1 (init_done=0, override=0) [2003/08/01 10:57:34, 5] lib/util_unistr.c:load_unicode_map(599) load_unicode_map: loading unicode map for codepage ISO8859-1. [2003/08/01 10:57:34, 8] lib/util.c:fcntl_lock(1308) fcntl_lock 4 6 0 1 2 [2003/08/01 10:57:34, 8] lib/util.c:fcntl_lock(1346) fcntl_lock: Lock call successful [2003/08/01 10:57:34, 2] lib/interface.c:add_interface(81) added interface ip=205.54.128.116 bcast=205.54.128.127 nmask=255.255.255.240 [2003/08/01 10:57:34, 3] libsmb/namequery.c:resolve_wins(710) resolve_wins: Attempting wins lookup for name testpdc<0x20> [2003/08/01 10:57:34, 8] lib/wins_srv.c:wins_srv_count(248) wins_srv_count: WINS status: 1 servers. 205.54.128.114 <205.54.128.114>: alive [2003/08/01 10:57:34, 3] libsmb/namequery.c:resolve_wins(728) resolve_wins: WINS server == <205.54.128.114> [2003/08/01 10:57:34, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2003/08/01 10:57:34, 5] libsmb/nmblib.c:send_udp(742) Sending a packet of len 50 to (205.54.128.114) on port 137 [2003/08/01 10:57:34, 10] lib/util_sock.c:read_udp_socket(193) read_udp_socket: lastip 205.54.128.114 lastport 137 read: 62 [2003/08/01 10:57:34, 10] libsmb/nmblib.c:parse_nmb(471) parse_nmb: packet id = 124 [2003/08/01 10:57:34, 5] libsmb/nmblib.c:read_packet(720) Received a packet of len 62 from (205.54.128.114) port 137 [2003/08/01 10:57:34, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 205.54.128.114(137) header: id=124 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=TESTPDC<20> rr_type=32 rr_class=1 ttl=0 answers 0 char `..6.r hex 6000CD368072 [2003/08/01 10:57:34, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 205.54.128.114 ( 205.54.128.114 ) [2003/08/01 10:57:34, 10] libsmb/namequery.c:internal_resolve_name(960) internal_resolve_name: returning 1 addresses: 205.54.128.114 [2003/08/01 10:57:34, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2003/08/01 10:57:34, 5] libsmb/nmblib.c:send_udp(742) Sending a packet of len 50 to (205.54.128.114) on port 137 [2003/08/01 10:57:34, 10] lib/util_sock.c:read_udp_socket(193) read_udp_socket: lastip 205.54.128.114 lastport 137 read: 301 [2003/08/01 10:57:34, 10] libsmb/nmblib.c:parse_nmb(471) parse_nmb: packet id = 20275 [2003/08/01 10:57:34, 5] libsmb/nmblib.c:read_packet(720) Received a packet of len 301 from (205.54.128.114) port 137 [2003/08/01 10:57:34, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 205.54.128.114(137) header: id=20275 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=THINKTANK<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .TESTPDC hex 0A544553545044432020202020202020 answers 10 char .D.TESTPDC hex 00440054455354504443202020202020 answers 20 char D.THINKTANK hex 20202044005448494E4B54414E4B2020 answers 30 char ...THINKTANK hex 2020202000C4005448494E4B54414E4B answers 40 char ...THINKTA hex 2020202020201CC4005448494E4B5441 answers 50 char NK .D.THINK hex 4E4B2020202020201B44005448494E4B answers 60 char TANK ...TES hex 54414E4B2020202020201EC400544553 answers 70 char TPDC .D.T hex 54504443202020202020202003440054 answers 80 char HINKTANK .D hex 48494E4B54414E4B2020202020201D44 answers 90 char ...__MSBROWSE__. hex 0001025F5F4D5342524F5753455F5F02 answers a0 char ...ADMINISTRATOR hex 01C40041444D494E4953545241544F52 answers b0 char .D......U..... hex 202003440000D009C5BC550000000000 answers c0 char ................ hex 00000000000000000000000000000000 answers d0 char ................ hex 00000000000000000000000000000000 answers e0 char ... hex 000000 [2003/08/01 10:57:34, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(164) cm_get_dc_name: Returning DC TESTPDC (205.54.128.114) for domain THINKTANK [2003/08/01 10:57:34, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(194) IPC$ connections done anonymously [2003/08/01 10:57:34, 5] nsswitch/winbindd_cm.c:cm_open_connection(316) connecting to TESTPDC from TESTSMB with username []\[] [2003/08/01 10:57:34, 3] libsmb/cliconnect.c:cli_full_connection(969) Connecting to host=TESTPDC share=IPC$ [2003/08/01 10:57:34, 3] lib/util_sock.c:open_socket_out(845) Connecting to 205.54.128.114 at port 445 Now here is the one with truss [2003/08/01 10:55:44, 1] nsswitch/winbindd.c:main(819) winbindd version 2.2.8a started. Copyright The Samba Team 2000-2001 [2003/08/01 10:55:44, 3] param/loadparm.c:init_globals(1275) Initialising global parameters [2003/08/01 10:55:44, 3] param/params.c:pm_process(577) params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/smb.conf" [2003/08/01 10:55:44, 3] param/loadparm.c:do_section(3055) Processing section "[global]" doing parameter workgroup = THINKTANK doing parameter netbios name = TESTSMB [2003/08/01 10:55:44, 4] param/loadparm.c:handle_netbios_name(2352) handle_netbios_name: set global_myname to: TESTSMB doing parameter security = DOMAIN doing parameter encrypt passwords = Yes doing parameter allow trusted domains = No doing parameter null passwords = Yes doing parameter password server = testpdc doing parameter lanman auth = No doing parameter min protocol = NT1 doing parameter acl compatibility = winnt doing parameter name resolve order = wins host bcast doing parameter domain master = No doing parameter wins server = 205.54.128.114 [2003/08/01 10:55:44, 4] lib/wins_srv.c:wins_srv_load_list(139) wins_srv_load_list(): Building WINS server list: 205.54.128.114, 1 WINS server listed. doing parameter winbind uid = 10000-20000 doing parameter winbind gid = 10000-20000 [2003/08/01 10:55:44, 2] param/loadparm.c:do_section(3073) Processing section "[test]" doing parameter comment = just a test doing parameter path = /home2 doing parameter read only = No [2003/08/01 10:55:45, 4] param/loadparm.c:lp_load(3503) pm_process() returned Yes [2003/08/01 10:55:45, 7] param/loadparm.c:lp_servicenumber(3612) lp_servicenumber: couldn't find homes [2003/08/01 10:55:45, 3] param/loadparm.c:lp_add_ipc(2028) adding IPC service IPC$ [2003/08/01 10:55:45, 3] param/loadparm.c:lp_add_ipc(2028) adding IPC service ADMIN$ [2003/08/01 10:55:45, 10] param/loadparm.c:set_server_role(3449) set_server_role: ROLE_DOMAIN_MEMBER [2003/08/01 10:55:45, 2] lib/interface.c:add_interface(81) added interface ip=205.54.128.116 bcast=205.54.128.127 nmask=255.255.255.240 [2003/08/01 10:55:45, 6] lib/charset.c:codepage_initialise(336) codepage_initialise: client code page = 850 [2003/08/01 10:55:45, 5] lib/charset.c:load_client_codepage(194) load_client_codepage: loading codepage 850. Adding chars 0x85 0xb7 (l->u = True) (u->l = True) Adding chars 0xa0 0xb5 (l->u = True) (u->l = True) Adding chars 0x83 0xb6 (l->u = True) (u->l = True) Adding chars 0xc6 0xc7 (l->u = True) (u->l = True) Adding chars 0x84 0x8e (l->u = True) (u->l = True) Adding chars 0x86 0x8f (l->u = True) (u->l = True) Adding chars 0x91 0x92 (l->u = True) (u->l = True) Adding chars 0x87 0x80 (l->u = True) (u->l = True) Adding chars 0x8a 0xd4 (l->u = True) (u->l = True) Adding chars 0x82 0x90 (l->u = True) (u->l = True) Adding chars 0x88 0xd2 (l->u = True) (u->l = True) Adding chars 0x89 0xd3 (l->u = True) (u->l = True) Adding chars 0x8d 0xde (l->u = True) (u->l = True) Adding chars 0xa1 0xd6 (l->u = True) (u->l = True) Adding chars 0x8c 0xd7 (l->u = True) (u->l = True) Adding chars 0x8b 0xd8 (l->u = True) (u->l = True) Adding chars 0xd0 0xd1 (l->u = True) (u->l = True) Adding chars 0xa4 0xa5 (l->u = True) (u->l = True) Adding chars 0x95 0xe3 (l->u = True) (u->l = True) Adding chars 0xa2 0xe0 (l->u = True) (u->l = True) Adding chars 0x93 0xe2 (l->u = True) (u->l = True) Adding chars 0xe4 0xe5 (l->u = True) (u->l = True) Adding chars 0x94 0x99 (l->u = True) (u->l = True) Adding chars 0x9b 0x9d (l->u = True) (u->l = True) Adding chars 0x97 0xeb (l->u = True) (u->l = True) Adding chars 0xa3 0xe9 (l->u = True) (u->l = True) Adding chars 0x96 0xea (l->u = True) (u->l = True) Adding chars 0x81 0x9a (l->u = True) (u->l = True) Adding chars 0xec 0xed (l->u = True) (u->l = True) Adding chars 0xe7 0xe8 (l->u = True) (u->l = True) Adding chars 0x9c 0x0 (l->u = False) (u->l = False) [2003/08/01 10:55:45, 10] lib/util_unistr.c:load_dos_unicode_map(738) load_dos_unicode_map: 850 [2003/08/01 10:55:45, 5] lib/util_unistr.c:load_unicode_map(599) load_unicode_map: loading unicode map for codepage 850. [2003/08/01 10:55:45, 10] lib/util_unistr.c:load_unix_unicode_map(755) load_unix_unicode_map: ISO8859-1 (init_done=0, override=0) [2003/08/01 10:55:45, 5] lib/util_unistr.c:load_unicode_map(599) load_unicode_map: loading unicode map for codepage ISO8859-1. [2003/08/01 10:55:45, 8] lib/util.c:fcntl_lock(1308) fcntl_lock 4 6 0 1 2 [2003/08/01 10:55:45, 8] lib/util.c:fcntl_lock(1346) fcntl_lock: Lock call successful [2003/08/01 10:55:45, 2] lib/interface.c:add_interface(81) added interface ip=205.54.128.116 bcast=205.54.128.127 nmask=255.255.255.240 [2003/08/01 10:55:45, 3] libsmb/namequery.c:resolve_wins(710) resolve_wins: Attempting wins lookup for name testpdc<0x20> [2003/08/01 10:55:45, 8] lib/wins_srv.c:wins_srv_count(248) wins_srv_count: WINS status: 1 servers. 205.54.128.114 <205.54.128.114>: alive [2003/08/01 10:55:45, 3] libsmb/namequery.c:resolve_wins(728) resolve_wins: WINS server == <205.54.128.114> [2003/08/01 10:55:45, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2003/08/01 10:55:45, 5] libsmb/nmblib.c:send_udp(742) Sending a packet of len 50 to (205.54.128.114) on port 137 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_udp_socket(193) read_udp_socket: lastip 205.54.128.114 lastport 137 read: 62 [2003/08/01 10:55:45, 10] libsmb/nmblib.c:parse_nmb(471) parse_nmb: packet id = 3580 [2003/08/01 10:55:45, 5] libsmb/nmblib.c:read_packet(720) Received a packet of len 62 from (205.54.128.114) port 137 [2003/08/01 10:55:45, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 205.54.128.114(137) header: id=3580 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=TESTPDC<20> rr_type=32 rr_class=1 ttl=0 answers 0 char `..6.r hex 6000CD368072 [2003/08/01 10:55:45, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 205.54.128.114 ( 205.54.128.114 ) [2003/08/01 10:55:45, 10] libsmb/namequery.c:internal_resolve_name(960) internal_resolve_name: returning 1 addresses: 205.54.128.114 [2003/08/01 10:55:45, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2003/08/01 10:55:45, 5] libsmb/nmblib.c:send_udp(742) Sending a packet of len 50 to (205.54.128.114) on port 137 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_udp_socket(193) read_udp_socket: lastip 205.54.128.114 lastport 137 read: 301 [2003/08/01 10:55:45, 10] libsmb/nmblib.c:parse_nmb(471) parse_nmb: packet id = 25678 [2003/08/01 10:55:45, 5] libsmb/nmblib.c:read_packet(720) Received a packet of len 301 from (205.54.128.114) port 137 [2003/08/01 10:55:45, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 205.54.128.114(137) header: id=25678 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=THINKTANK<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .TESTPDC hex 0A544553545044432020202020202020 answers 10 char .D.TESTPDC hex 00440054455354504443202020202020 answers 20 char D.THINKTANK hex 20202044005448494E4B54414E4B2020 answers 30 char ...THINKTANK hex 2020202000C4005448494E4B54414E4B answers 40 char ...THINKTA hex 2020202020201CC4005448494E4B5441 answers 50 char NK .D.THINK hex 4E4B2020202020201B44005448494E4B answers 60 char TANK ...TES hex 54414E4B2020202020201EC400544553 answers 70 char TPDC .D.T hex 54504443202020202020202003440054 answers 80 char HINKTANK .D hex 48494E4B54414E4B2020202020201D44 answers 90 char ...__MSBROWSE__. hex 0001025F5F4D5342524F5753455F5F02 answers a0 char ...ADMINISTRATOR hex 01C40041444D494E4953545241544F52 answers b0 char .D......U..... hex 202003440000D009C5BC550000000000 answers c0 char ................ hex 00000000000000000000000000000000 answers d0 char ................ hex 00000000000000000000000000000000 answers e0 char ... hex 000000 [2003/08/01 10:55:45, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(164) cm_get_dc_name: Returning DC TESTPDC (205.54.128.114) for domain THINKTANK [2003/08/01 10:55:45, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(194) IPC$ connections done anonymously [2003/08/01 10:55:45, 5] nsswitch/winbindd_cm.c:cm_open_connection(316) connecting to TESTPDC from TESTSMB with username []\[] [2003/08/01 10:55:45, 3] libsmb/cliconnect.c:cli_full_connection(969) Connecting to host=TESTPDC share=IPC$ [2003/08/01 10:55:45, 3] lib/util_sock.c:open_socket_out(845) Connecting to 205.54.128.114 at port 445 [2003/08/01 10:55:45, 2] lib/util_sock.c:open_socket_out(874) error connecting to 205.54.128.114:445 (Connection refused) [2003/08/01 10:55:45, 3] lib/util_sock.c:open_socket_out(845) Connecting to 205.54.128.114 at port 139 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_KEEPALIVE = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_REUSEADDR = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_BROADCAST = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option TCP_NODELAY = 1 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_LOWDELAY = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_THROUGHPUT = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDBUF = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVBUF = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDLOWAT = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVLOWAT = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDTIMEO = 0 [2003/08/01 10:55:45, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVTIMEO = 0 [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(518) write_socket(7,72) [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(521) write_socket(7,72) wrote 72 [2003/08/01 10:55:45, 5] libsmb/cliconnect.c:cli_session_request(674) Sent session request [2003/08/01 10:55:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 0 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=0 smb_com=0x0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=0 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=0 smb_pid=0 smb_uid=0 smb_mid=0 smt_wct=0 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=0 [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(518) write_socket(7,168) [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(521) write_socket(7,168) wrote 168 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 97 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=97 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=0 smb_pid=585 smb_uid=0 smb_mid=1 smt_wct=17 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=7 (0x7) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=12803 (0x3203) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=256 (0x100) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[3]=1024 (0x400) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[4]=17 (0x11) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[6]=256 (0x100) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[9]=64768 (0xFD00) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[10]=67 (0x43) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[11]=61440 (0xF000) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[12]=15408 (0x3C30) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[13]=5247 (0x147F) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[14]=50008 (0xC358) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[15]=50177 (0xC401) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[16]=2303 (0x8FF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=28 [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1541) [000] D5 72 C9 29 30 0D 25 78 54 00 48 00 49 00 4E 00 .r.)0.%x T.H.I.N. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [010] 4B 00 54 00 41 00 4E 00 4B 00 00 00 K.T.A.N. K... [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=97 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=0 smb_pid=585 smb_uid=0 smb_mid=1 smt_wct=17 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=7 (0x7) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=12803 (0x3203) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=256 (0x100) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[3]=1024 (0x400) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[4]=17 (0x11) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[6]=256 (0x100) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[9]=64768 (0xFD00) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[10]=67 (0x43) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[11]=61440 (0xF000) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[12]=15408 (0x3C30) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[13]=5247 (0x147F) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[14]=50008 (0xC358) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[15]=50177 (0xC401) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[16]=2303 (0x8FF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=28 [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1541) [000] D5 72 C9 29 30 0D 25 78 54 00 48 00 49 00 4E 00 .r.)0.%x T.H.I.N. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [010] 4B 00 54 00 41 00 4E 00 4B 00 00 00 K.T.A.N. K... [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(518) write_socket(7,92) [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(521) write_socket(7,92) wrote 92 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 130 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=130 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=0 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=3 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=130 (0x82) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=89 [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1541) [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [010] 00 4E 00 54 00 20 00 34 00 2E 00 30 00 00 00 4E .N.T. .4 ...0...N [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [020] 00 54 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 .T. .L.A .N. .M.a [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [030] 00 6E 00 61 00 67 00 65 00 72 00 20 00 34 00 2E .n.a.g.e .r. .4.. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [040] 00 30 00 00 00 54 00 48 00 49 00 4E 00 4B 00 54 .0...T.H .I.N.K.T [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [050] 00 41 00 4E 00 4B 00 00 00 .A.N.K.. . [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=130 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=0 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=3 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=130 (0x82) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=89 [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1541) [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [010] 00 4E 00 54 00 20 00 34 00 2E 00 30 00 00 00 4E .N.T. .4 ...0...N [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [020] 00 54 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 .T. .L.A .N. .M.a [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [030] 00 6E 00 61 00 67 00 65 00 72 00 20 00 34 00 2E .n.a.g.e .r. .4.. [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [040] 00 30 00 00 00 54 00 48 00 49 00 4E 00 4B 00 54 .0...T.H .I.N.K.T [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1549) [050] 00 41 00 4E 00 4B 00 00 00 .A.N.K.. . [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(518) write_socket(7,82) [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(521) write_socket(7,82) wrote 82 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 48 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=3 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=48 (0x30) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=1 (0x1) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=7 [2003/08/01 10:55:45, 10] lib/util.c:dump_data(1541) [000] 49 50 43 00 00 00 00 IPC.... [2003/08/01 10:55:45, 10] libsmb/clientgen.c:cli_init_creds(159) cli_init_creds: user domain flgs: 0 ntlmssp_cli_flgs:0 [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(518) write_socket(7,104) [2003/08/01 10:55:45, 6] lib/util_sock.c:write_socket(521) write_socket(7,104) wrote 104 [2003/08/01 10:55:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 103 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(275) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=34 [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[1]=103 (0x67) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[2]=768 (0x300) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[3]=272 (0x110) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[10]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[11]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[12]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[13]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[14]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[15]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[16]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[17]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[18]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[19]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[20]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[21]=32768 (0x8000) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[22]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[23]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[24]=16 (0x10) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[25]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[26]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[27]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[28]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[29]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[30]=0 (0x0) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[31]=512 (0x200) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[32]=65280 (0xFF00) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(286) smb_vwv[33]=5 (0x5) [2003/08/01 10:55:45, 5] lib/util.c:show_msg(291) smb_bcc=0 [2003/08/01 10:55:45, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1118) Bind RPC Pipe[1003]: \PIPE\lsarpc [2003/08/01 10:55:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(950) Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. [2003/08/01 10:55:46, 5] lib/util.c:dump_data(1549) [010] 00 00 00 00 .... [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:valid_pipe_name(953) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` [2003/08/01 10:55:46, 5] lib/util.c:dump_data(1549) [010] 00 00 00 02 .... [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 0b [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0048 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000001 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_rb [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_bba [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0010 max_tsize: 1630 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0012 max_rsize: 1630 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 assoc_gid: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 num_elements: 00000001 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001c context_id : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 001e num_syntaxes: 01 [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 00001f smb_io_rpc_iface [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0020 data : 12345778 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0024 data : 1234 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0026 data : abcd [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 0028 data : ef 00 01 23 45 67 89 ab [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0030 version: 00000000 [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000034 smb_io_rpc_iface [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0034 data : 8a885d04 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0038 data : 1ceb [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 003a data : 11c9 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 003c data : 9f e8 08 00 2b 10 48 60 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0044 version: 00000002 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe(345) rpc_api_pipe: cmd:26 fnum:1003 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=16 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=72 (0x48) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=72 (0x48) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[10]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[11]=72 (0x48) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[12]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[13]=2 (0x2) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[14]=38 (0x26) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[15]=4099 (0x1003) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=87 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 30 .......H .......0 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] 16 30 16 00 00 00 00 01 00 00 00 00 00 01 00 78 .0...... .......x [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [050] 10 48 60 02 00 00 00 .H`.... [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(518) write_socket(7,158) [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(521) write_socket(7,158) wrote 158 [2003/08/01 10:55:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 124 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=68 (0x44) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=68 (0x44) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=69 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 30 16 30 16 66 83 00 00 0C 00 5C 50 49 50 45 .0.0.f.. ...\PIPE [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [040] 60 02 00 00 00 `.... [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=68 (0x44) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=68 (0x44) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=69 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 30 16 30 16 66 83 00 00 0C 00 5C 50 49 50 45 .0.0.f.. ...\PIPE [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [040] 60 02 00 00 00 `.... [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114) rpc_check_hdr: rdata->data_size = 68 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 0c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0044 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000001 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe(406) rpc_api_pipe: len left: 0 smbtrans read: 68 [2003/08/01 10:55:46, 6] rpc_client/cli_pipe.c:rpc_api_pipe(444) rpc_api_pipe: fragment first and last both set [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1145) rpc_pipe_bind: rpc_api_pipe returned OK. [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_ba [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_bba [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0010 max_tsize: 1630 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0012 max_rsize: 1630 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 assoc_gid: 00008366 [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000018 smb_io_rpc_addr_str [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0018 len: 000c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 001a str: \PIPE\lsass. [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000026 smb_io_rpc_results [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0028 num_results: 01 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 002c result : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 002e reason : 0000 [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000030 smb_io_rpc_iface [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0030 data : 8a885d04 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0034 data : 1ceb [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0036 data : 11c9 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 0038 data : 9f e8 08 00 2b 10 48 60 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0040 version: 00000002 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:check_bind_response(982) bind_rpc_pipe: server pipe_name found: \PIPE\lsass [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:check_bind_response(1013) bind_rpc_pipe: accepted! [2003/08/01 10:55:46, 5] rpc_parse/parse_lsa.c:init_q_open_pol(274) init_open_pol: attr:0 da:33554432 [2003/08/01 10:55:46, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(193) init_lsa_obj_attr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_open_pol [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 ptr : 00000001 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0004 system_name: 005c [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000008 lsa_io_obj_attr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0008 len : 00000018 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c ptr_root_dir: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 ptr_obj_name: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 attributes : 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 ptr_sec_desc: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 001c ptr_sec_qos : 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0020 des_access: 02000000 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe_req(808) rpc_api_pipe_req: Outgoing data not a multiple of 8 bytes.... [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:create_rpc_request(738) create_rpc_request: opnum: 0x6 data_len: 0x3c [2003/08/01 10:55:46, 10] rpc_client/cli_pipe.c:create_rpc_request(755) create_rpc_request: data_len: 3c auth_len: 0 alloc_hint: 2c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 003c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_req hdr_req [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 0000002c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0016 opnum : 0006 [2003/08/01 10:55:46, 100] rpc_client/cli_pipe.c:rpc_api_pipe_req(887) data_len: 3c data_calc_len: 3c [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe(345) rpc_api_pipe: cmd:26 fnum:1003 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=142 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=16 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=60 (0x3C) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=60 (0x3C) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[10]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[11]=60 (0x3C) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[12]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[13]=2 (0x2) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[14]=38 (0x26) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[15]=4099 (0x1003) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=75 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 00 03 10 00 00 00 3C 00 00 00 02 00 00 00 2C .......< ......., [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [040] 00 00 00 00 00 00 00 00 00 00 02 ........ ... [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(518) write_socket(7,146) [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(521) write_socket(7,146) wrote 146 [2003/08/01 10:55:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 104 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=48 (0x30) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=48 (0x30) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=49 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 3C 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 <....... .0...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 64 1C D9 ........ .....d.. [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] AF E6 C0 D7 11 BF 6E E3 1E 5E 15 DD 9C 00 00 00 ......n. .^...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 00 . [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=48 (0x30) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=48 (0x30) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=49 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 3C 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 <....... .0...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 64 1C D9 ........ .....d.. [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] AF E6 C0 D7 11 BF 6E E3 1E 5E 15 DD 9C 00 00 00 ......n. .^...... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] 00 . [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114) rpc_check_hdr: rdata->data_size = 48 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 02 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0030 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000002 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000018 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0016 cancel_ct : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0017 reserved : 00 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe(406) rpc_api_pipe: len left: 0 smbtrans read: 48 [2003/08/01 10:55:46, 6] rpc_client/cli_pipe.c:rpc_api_pipe(444) rpc_api_pipe: fragment first and last both set [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000018 lsa_io_r_open_pol [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000018 smb_io_pol_hnd [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 data1: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 001c data2: afd91c64 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0020 data3: c0e6 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0022 data4: 11d7 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 0024 data5: bf 6e e3 1e 5e 15 dd 9c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_ntstatus(618) 002c status: NT_STATUS_OK [2003/08/01 10:55:46, 5] rpc_parse/parse_lsa.c:init_q_query(460) init_q_query [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_query [2003/08/01 10:55:46, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: afd91c64 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: c0e6 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 11d7 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: bf 6e e3 1e 5e 15 dd 9c [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 info_class: 0005 [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe_req(808) rpc_api_pipe_req: Outgoing data not a multiple of 8 bytes.... [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:create_rpc_request(738) create_rpc_request: opnum: 0x7 data_len: 0x2e [2003/08/01 10:55:46, 10] rpc_client/cli_pipe.c:create_rpc_request(755) create_rpc_request: data_len: 2e auth_len: 0 alloc_hint: 1e [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 002e [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000003 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_req hdr_req [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 0000001e [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:46, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0016 opnum : 0007 [2003/08/01 10:55:46, 100] rpc_client/cli_pipe.c:rpc_api_pipe_req(887) data_len: 2e data_calc_len: 2e [2003/08/01 10:55:46, 5] rpc_client/cli_pipe.c:rpc_api_pipe(345) rpc_api_pipe: cmd:26 fnum:1003 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=16 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=46 (0x2E) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=46 (0x2E) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[10]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[11]=46 (0x2E) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[12]=82 (0x52) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[13]=2 (0x2) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[14]=38 (0x26) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[15]=4099 (0x1003) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(291) smb_bcc=61 [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1541) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [010] 00 00 03 10 00 00 00 2E 00 00 00 03 00 00 00 1E ........ ........ [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 07 00 00 00 00 00 64 1C D9 AF E6 ........ ...d.... [2003/08/01 10:55:46, 10] lib/util.c:dump_data(1549) [030] C0 D7 11 BF 6E E3 1E 5E 15 DD 9C 05 00 ....n..^ ..... [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(518) write_socket(7,132) [2003/08/01 10:55:46, 6] lib/util_sock.c:write_socket(521) write_socket(7,132) wrote 132 [2003/08/01 10:55:46, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 102 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(275) size=102 smb_com=0x25 smb_rcls=5 smb_reh=0 smb_err=32768 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[1]=46 (0x2E) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:46, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=46 (0x2E) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=47 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 2E 05 00 02 03 10 00 00 00 6C 00 00 00 03 00 00 ........ .l...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 54 00 00 00 00 00 00 00 20 A7 15 00 05 00 D9 .T...... . ...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] AF 12 00 14 00 80 C0 15 00 58 8E 15 00 0A 00 ........ .X..... [2003/08/01 10:55:47, 5] lib/util.c:show_msg(275) size=102 smb_com=0x25 smb_rcls=5 smb_reh=0 smb_err=32768 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[1]=46 (0x2E) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=46 (0x2E) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=47 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 2E 05 00 02 03 10 00 00 00 6C 00 00 00 03 00 00 ........ .l...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 54 00 00 00 00 00 00 00 20 A7 15 00 05 00 D9 .T...... . ...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] AF 12 00 14 00 80 C0 15 00 58 8E 15 00 0A 00 ........ .X..... [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114) rpc_check_hdr: rdata->data_size = 46 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 02 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 006c [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000003 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000054 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0016 cancel_ct : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0017 reserved : 00 [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_api_pipe(406) rpc_api_pipe: len left: 62 smbtrans read: 46 [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_read(54) rpc_read: data_to_read: 62 rdata offset: 46 extra_data_size: 62 [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_read(65) rpc_read: grew buffer by 62 bytes to 108 [2003/08/01 10:55:47, 6] lib/util_sock.c:write_socket(518) write_socket(7,59) [2003/08/01 10:55:47, 6] lib/util_sock.c:write_socket(521) write_socket(7,59) wrote 59 [2003/08/01 10:55:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 122 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(275) size=122 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=12 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[1]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=62 (0x3E) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=60 (0x3C) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[10]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[11]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=63 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 03 00 00 00 00 00 00 09 00 00 00 54 00 48 00 49 ........ ...T.H.I [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 4E 00 4B 00 54 00 41 00 4E 00 4B 00 F4 AF 04 .N.K.T.A .N.K.... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 45 ........ .......E [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [030] 49 05 32 72 7C 16 33 82 5F F5 59 00 00 00 00 I.2r|.3. _.Y.... [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_read(81) rpc_read: num_read = 62, read offset: 0, to read: 62 [2003/08/01 10:55:47, 6] rpc_client/cli_pipe.c:rpc_api_pipe(444) rpc_api_pipe: fragment first and last both set [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000018 lsa_io_r_query [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 undoc_buffer: 0015a720 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 001c info_class: 0005 [2003/08/01 10:55:47, 6] rpc_parse/parse_prs.c:prs_debug(60) 000020 lsa_io_dom_query [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0020 uni_dom_max_len: 0012 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0022 uni_dom_str_len: 0014 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0024 buffer_dom_name: 0015c080 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0028 buffer_dom_sid : 00158e58 [2003/08/01 10:55:47, 7] rpc_parse/parse_prs.c:prs_debug(60) 00002c smb_io_unistr2 unistr2 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 002c uni_max_len: 0000000a [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0030 undoc : 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0034 uni_str_len: 00000009 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:dbg_rw_punival(760) 0038 buffer : T.H.I.N.K.T.A.N.K. [2003/08/01 10:55:47, 7] rpc_parse/parse_prs.c:prs_debug(60) 00004c smb_io_dom_sid2 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 004c num_auths: 00000004 [2003/08/01 10:55:47, 8] rpc_parse/parse_prs.c:prs_debug(60) 000050 smb_io_dom_sid sid [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0050 sid_rev_num: 01 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0051 num_auths : 04 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0052 id_auth[0] : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0053 id_auth[1] : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0054 id_auth[2] : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0055 id_auth[3] : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0056 id_auth[4] : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0057 id_auth[5] : 05 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32s(815) 0058 sub_auths : 00000015 32054945 33167c72 59f55f82 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_ntstatus(618) 0068 status: NT_STATUS_OK [2003/08/01 10:55:47, 1] nsswitch/winbindd_util.c:init_domain_list(150) Added domain THINKTANK (S-1-5-21-839207237-857111666-1509252994) [2003/08/01 10:55:47, 1] nsswitch/winbindd_util.c:init_domain_list(152) getting trusted domain list [2003/08/01 10:55:47, 5] rpc_parse/parse_lsa.c:init_q_enum_trust_dom(492) init_q_enum_trust_dom [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 lsa_io_q_enum_trust_dom [2003/08/01 10:55:47, 6] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_pol_hnd [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0000 data1: 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0004 data2: afd91c64 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 data3: c0e6 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a data4: 11d7 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8s(675) 000c data5: bf 6e e3 1e 5e 15 dd 9c [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0014 enum_context : 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 preferred_len: ffffffff [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_api_pipe_req(808) rpc_api_pipe_req: Outgoing data not a multiple of 8 bytes.... [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:create_rpc_request(738) create_rpc_request: opnum: 0xd data_len: 0x34 [2003/08/01 10:55:47, 10] rpc_client/cli_pipe.c:create_rpc_request(755) create_rpc_request: data_len: 34 auth_len: 0 alloc_hint: 24 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr hdr [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0034 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000004 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_req hdr_req [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000024 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0016 opnum : 000d [2003/08/01 10:55:47, 100] rpc_client/cli_pipe.c:rpc_api_pipe_req(887) data_len: 34 data_calc_len: 34 [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_api_pipe(345) rpc_api_pipe: cmd:26 fnum:1003 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(275) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=49153 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=16 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[1]=52 (0x34) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[3]=52 (0x34) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[10]=82 (0x52) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[11]=52 (0x34) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[12]=82 (0x52) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[13]=2 (0x2) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[14]=38 (0x26) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[15]=4099 (0x1003) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=67 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 00 03 10 00 00 00 34 00 00 00 04 00 00 00 24 .......4 .......$ [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 0D 00 00 00 00 00 64 1C D9 AF E6 ........ ...d.... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [030] C0 D7 11 BF 6E E3 1E 5E 15 DD 9C 00 00 00 00 FF ....n..^ ........ [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [040] FF FF FF ... [2003/08/01 10:55:47, 6] lib/util_sock.c:write_socket(518) write_socket(7,138) [2003/08/01 10:55:47, 6] lib/util_sock.c:write_socket(521) write_socket(7,138) wrote 138 [2003/08/01 10:55:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(559) got smb length of 96 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(275) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[1]=40 (0x28) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=40 (0x28) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=41 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 04 00 00 4....... .(...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 1A 00 00 80 ........ . [2003/08/01 10:55:47, 5] lib/util.c:show_msg(275) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(281) smb_tid=12288 smb_pid=585 smb_uid=22528 smb_mid=1 smt_wct=10 [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[0]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[1]=40 (0x28) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[2]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[3]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[4]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[5]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[6]=40 (0x28) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[7]=56 (0x38) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[8]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(286) smb_vwv[9]=0 (0x0) [2003/08/01 10:55:47, 5] lib/util.c:show_msg(291) smb_bcc=41 [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1541) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 04 00 00 4....... .(...... [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2003/08/01 10:55:47, 10] lib/util.c:dump_data(1549) [020] 00 00 00 00 00 1A 00 00 80 ........ . [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114) rpc_check_hdr: rdata->data_size = 40 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000000 smb_io_rpc_hdr rpc_hdr [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0000 major : 05 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0001 minor : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0002 pkt_type : 02 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0003 flags : 03 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0004 pack_type0: 10 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0005 pack_type1: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0006 pack_type2: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0007 pack_type3: 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0008 frag_len : 0028 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 000a auth_len : 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 000c call_id : 00000004 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0010 alloc_hint: 00000010 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint16(559) 0014 context_id: 0000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0016 cancel_ct : 00 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint8(530) 0017 reserved : 00 [2003/08/01 10:55:47, 5] rpc_client/cli_pipe.c:rpc_api_pipe(406) rpc_api_pipe: len left: 0 smbtrans read: 40 [2003/08/01 10:55:47, 6] rpc_client/cli_pipe.c:rpc_api_pipe(444) rpc_api_pipe: fragment first and last both set [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_debug(60) 000018 lsa_io_r_enum_trust_dom [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0018 enum_context : 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 001c num_domains : 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_uint32(588) 0020 ptr_enum_domains: 00000000 [2003/08/01 10:55:47, 5] rpc_parse/parse_prs.c:prs_ntstatus(618) 0024 status: NT_STATUS_NO_MORE_ENTRIES -----Original Message----- From: Jeremy Allison [mailto:[EMAIL PROTECTED] Sent: Friday, August 01, 2003 10:25 AM To: Clark Mr Philip Cc: 'Jeremy Allison'; '[EMAIL PROTECTED]' Subject: Re: [Samba] winbind on Solaris 2.5.1 not working. On Fri, Aug 01, 2003 at 08:15:47AM -0700, Clark Mr Philip wrote: > Thought of that also but they no longer support 2.5.1 and the Marines are > kind of cheap in that respect. Well it's difficult to help without some commitment from the Marines and Sun not supporting 2.5.1 :-(. Can you post a truss of what is going on and maybe we can help. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba