rendered paste body[2008/02/07 18:46:08, 0] smbd/service.c:make_connection_snum(911)
'/home/scum/ftp_folder' does not exist or permission denied when connecting to [ftp_folder] Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:08, 3] smbd/connection.c:yield_connection(69)
Yielding connection to ftp_folder
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_BAD_NETWORK_NAME
[2008/02/07 18:46:08, 3] smbd/process.c:process_smb(1110)
Transaction 378 of length 148
[2008/02/07 18:46:08, 3] smbd/process.c:switch_message(914)
switch message SMBtrans2 (pid 10672) conn 0x975b788
[2008/02/07 18:46:08, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:08, 3] smbd/vfs.c:vfs_init_default(219)
Initialising default vfs hooks
[2008/02/07 18:46:08, 3] smbd/msdfs.c:create_conn_struct(165)
create_conn_struct: Can't ChDir to new conn path /home/scum/ftp_folder. Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:unix_error_packet(90)
unix_error_packet: error string = Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
error packet at smbd/trans2.c(4945) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
[2008/02/07 18:46:08, 3] smbd/process.c:process_smb(1110)
Transaction 379 of length 148
[2008/02/07 18:46:08, 3] smbd/process.c:switch_message(914)
switch message SMBtrans2 (pid 10672) conn 0x975b788
[2008/02/07 18:46:08, 3] smbd/vfs.c:vfs_init_default(219)
Initialising default vfs hooks
[2008/02/07 18:46:08, 3] smbd/msdfs.c:create_conn_struct(165)
create_conn_struct: Can't ChDir to new conn path /home/scum/ftp_folder. Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:unix_error_packet(90)
unix_error_packet: error string = Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
error packet at smbd/trans2.c(4945) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 380 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 381 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72a7 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 382 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72a7 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 383 of length 188
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=100 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72a7)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 384
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 384 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 385 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 386 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72a8 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 387 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72a8 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 388 of length 188
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=100 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72a8)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 384
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 389 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 390 of length 106
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe spoolss opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 391 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\spoolss
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72a9 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 392 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72a9 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 393 of length 290
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=202 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "spoolss" (pnum 72a9)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 71
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
checking name: \\192.168.0.13
[2008/02/07 18:46:12, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(408)
Setting printer type=\\192.168.0.13
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 154
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 394 of length 132
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "spoolss" (pnum 72a9)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2008/02/07 18:46:12, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 395 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 396 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 397 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72aa nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 398 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72aa min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 399 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72aa)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 106
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 400 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 401 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 402 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72ab nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 403 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72ab min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 404 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72ab)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 174
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 405 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 406 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 407 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72ac nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 408 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72ac min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 409 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72ac)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 106
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 410 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 411 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 412 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72ad nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 413 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72ad min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 414 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72ad)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 174
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 415 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 416 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe winreg opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 417 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\winreg
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72ae nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 418 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72ae min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 419 of length 124
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=36 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] lib/util_seaccess.c:se_access_check(250)
[2008/02/07 18:46:12, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is S-1-5-21-4196362445-2381206132-4151649169-2000
se_access_check: also S-1-22-2-500
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 510
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 420 of length 232
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=144 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 86
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 421 of length 132
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_CLOSE
[2008/02/07 18:46:12, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
Transaction 422 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 121 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 122 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c3 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 123 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c3 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 124 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72c3)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 125 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 126 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 127 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c4 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 128 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c4 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 129 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72c4)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 130 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 131 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 132 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c5 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 133 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c5 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 134 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72c5)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 135 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 136 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 137 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c6 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 138 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c6 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 139 of length 172
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=84 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72c6)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 368
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 140 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 141 of length 106
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe spoolss opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 142 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\spoolss
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c7 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 143 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c7 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 144 of length 274
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=186 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "spoolss" (pnum 72c7)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 71
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
checking name: \\Fred
[2008/02/07 18:46:13, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(408)
Setting printer type=\\Fred
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 138
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 145 of length 132
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "spoolss" (pnum 72c7)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2008/02/07 18:46:13, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 146 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 147 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 148 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c8 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 149 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c8 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 150 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72c8)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 151 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 152 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 153 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72c9 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 154 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72c9 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 155 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72c9)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 156 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 157 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 158 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72ca nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 159 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72ca min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 160 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "wkssvc" (pnum 72ca)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 161 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 162 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 163 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72cb nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 164 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72cb min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 165 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "srvsvc" (pnum 72cb)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 166 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 167 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
nt_open_pipe: Known pipe winreg opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 168 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
check_bind_req for \PIPE\winreg
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
writeX-IPC pnum=72cc nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 169 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
readX-IPC pnum=72cc min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 170 of length 124
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=36 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_OPEN_HKLM
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] lib/util_seaccess.c:se_access_check(250)
[2008/02/07 18:46:13, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is S-1-5-21-4196362445-2381206132-4151649169-2000
se_access_check: also S-1-22-2-500
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 510
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 171 of length 232
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=144 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 86
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 172 of length 132
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
api_rpcTNP: rpc command: REG_CLOSE
[2008/02/07 18:46:13, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
Closed policy
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
Transaction 173 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:47:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:47:12, 3] smbd/process.c:check_reload(1340)
Printcap cache time expired.
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(117)
reloading printcap cache
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(117)
reloading printcap cache
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2008/02/07 18:47:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:47:13, 3] smbd/process.c:check_reload(1340)
Printcap cache time expired.
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(117)
reloading printcap cache
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(117)
reloading printcap cache
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2008/02/07 18:48:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:48:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0