Setting ACLs when creating files from Windows

[Corinna Vinschen-4]

Hi,

I'm puzzeling over this problem for some time now.  So far I need
a special hack in Cygwin for Samba, probably because I simply don't
understand something about the user mapping correctly.

My current situation is, I have a Samba server (3.0.30) which is a domain member machine.  In smb.conf, security is set to domain.  There's
no winbindd running.  Before I set up the domain, I had the same problem
using security = server with the server being another Windows machine in
the same workgroup.

Usually when creating and changing files on the Samba shares, it
works fine, as long as creating the file uses a NULL security descriptor.

However, when Cygwin tries to create a file, it checks if the underlying
filesystem supports ACLs, and if so, it tries to set the ACL immediately
to correct POSIX permissions for the local user, along these lines (and
very simplifed):

  DESCRIPTOR *sd = NULL;
  if ((open_flags & O_CREATE)
      && (fs_flags & FS_PERSISTENT_ACLS))
    sd = create_posix_like_security_attributes_for_current_user()
  NtCreateFile (&fhandle, ..., sd, );

The ACL created for this case is equivalent to typical POSIX permissions,
and consists of three entries:

  - SID of current windows user
  - SID of user's primary group
  - SID for "Everyone"

The problem is, when creating a file this way, the NtCreateFile call
fails with STATUS_ACCESS_DENIED.  But, the file *has* been created,
with default permissions and owned by the mapped unix user and group.
For testing purposes I changed the above code to

  SECURITY_DESCRIPTOR *sd = NULL;
  if ((open_flags & O_CREATE)
      && (fs_flags & FS_PERSISTENT_ACLS))
    sd = create_posix_like_security_attributes_for_current_user()
  NtCreateFile (&fhandle, ..., NULL sd, );
  NtSetSecurityObject (fhandle, ALL_SECURITY_INFORMATION, sd);

Now the NtCreateFile call succeeds, but the NtSetSecurityObject call
fails with STATUS_ACCESS_DENIED.

The smbd logfile contains this log entry:

  [2008/07/18 13:12:45, 10] passdb/lookup_sid.c:legacy_sid_to_uid(1260)
    LEGACY: mapping failed for sid S-1-5-21-2913048732-1697188782-3448811101-1001

Here are my questions:

- Why does legacy_sid_to_uid fail?  The user with the above SID has been
  authenticated correctly and is mapped to a unix user:
 
  [2008/07/18 13:12:45, 5] smbd/uid.c:change_to_user(273)
    change_to_user uid=(500,500) gid=(0,11125)

  Why is the SID not mapped to that uid?

- I'm looking for a generic solution to this problem from a Windows
  application perspective.  Except that the underlying system is
  a Samba share, I heve no further knowledge about the underlying
  system.  I don't know which securty is used and I have no idea
  about the SIDs used for UNIX users and groups.  I only know the
  SID of my Windows environment.

  Is there any chance to have a generic solution, except for ignoring
  file permissions when creating files on Samba?

- Last but not least, in the first case, where the descriptor is give
  to NtCreateFile, why is the file not removed even though NtCreateFile
  failed?


Thanks in advance,
Corinna

[Corinna Vinschen-4]

Ping?


Corinna

On Jul 18 14:00, Corinna Vinschen wrote:

> Hi,
>
> I'm puzzeling over this problem for some time now.  So far I need
> a special hack in Cygwin for Samba, probably because I simply don't
> understand something about the user mapping correctly.
>
> My current situation is, I have a Samba server (3.0.30) which is a domain member machine.  In smb.conf, security is set to domain.  There's
> no winbindd running.  Before I set up the domain, I had the same problem
> using security = server with the server being another Windows machine in
> the same workgroup.
>
> Usually when creating and changing files on the Samba shares, it
> works fine, as long as creating the file uses a NULL security descriptor.
>
> However, when Cygwin tries to create a file, it checks if the underlying
> filesystem supports ACLs, and if so, it tries to set the ACL immediately
> to correct POSIX permissions for the local user, along these lines (and
> very simplifed):
>
>   DESCRIPTOR *sd = NULL;
>   if ((open_flags & O_CREATE)
>       && (fs_flags & FS_PERSISTENT_ACLS))
>     sd = create_posix_like_security_attributes_for_current_user()
>   NtCreateFile (&fhandle, ..., sd, );
>
> The ACL created for this case is equivalent to typical POSIX permissions,
> and consists of three entries:
>
>   - SID of current windows user
>   - SID of user's primary group
>   - SID for "Everyone"
>
> The problem is, when creating a file this way, the NtCreateFile call
> fails with STATUS_ACCESS_DENIED.  But, the file *has* been created,
> with default permissions and owned by the mapped unix user and group.
> For testing purposes I changed the above code to
>
>   SECURITY_DESCRIPTOR *sd = NULL;
>   if ((open_flags & O_CREATE)
>       && (fs_flags & FS_PERSISTENT_ACLS))
>     sd = create_posix_like_security_attributes_for_current_user()
>   NtCreateFile (&fhandle, ..., NULL sd, );
>   NtSetSecurityObject (fhandle, ALL_SECURITY_INFORMATION, sd);
>
> Now the NtCreateFile call succeeds, but the NtSetSecurityObject call
> fails with STATUS_ACCESS_DENIED.
>
> The smbd logfile contains this log entry:
>
>   [2008/07/18 13:12:45, 10] passdb/lookup_sid.c:legacy_sid_to_uid(1260)
>     LEGACY: mapping failed for sid S-1-5-21-2913048732-1697188782-3448811101-1001
>
> Here are my questions:
>
> - Why does legacy_sid_to_uid fail?  The user with the above SID has been
>   authenticated correctly and is mapped to a unix user:
>  
>   [2008/07/18 13:12:45, 5] smbd/uid.c:change_to_user(273)
>     change_to_user uid=(500,500) gid=(0,11125)
>
>   Why is the SID not mapped to that uid?
>
> - I'm looking for a generic solution to this problem from a Windows
>   application perspective.  Except that the underlying system is
>   a Samba share, I heve no further knowledge about the underlying
>   system.  I don't know which securty is used and I have no idea
>   about the SIDs used for UNIX users and groups.  I only know the
>   SID of my Windows environment.
>
>   Is there any chance to have a generic solution, except for ignoring
>   file permissions when creating files on Samba?
>
> - Last but not least, in the first case, where the descriptor is give
>   to NtCreateFile, why is the file not removed even though NtCreateFile
>   failed?
>
>
> Thanks in advance,
> Corinna

[Volker Lendecke]

On Wed, Jul 23, 2008 at 12:22:20PM +0200, Corinna Vinschen wrote:
> Ping?

:-)

There's also your other mail in my inbox. At least I am
pretty busy, sorry :-)

Volker

[Corinna Vinschen-4]

On Jul 24 00:03, Volker Lendecke wrote:
> On Wed, Jul 23, 2008 at 12:22:20PM +0200, Corinna Vinschen wrote:
> > Ping?
>
> :-)
>
> There's also your other mail in my inbox. At least I am

You mean, the one about the NFS-like extended attribute API?

> pretty busy, sorry :-)

No worries,
Corinna

[Volker Lendecke]

On Fri, Jul 18, 2008 at 02:00:15PM +0200, Corinna Vinschen wrote:
> - Why does legacy_sid_to_uid fail?  The user with the above SID has been
>   authenticated correctly and is mapped to a unix user:
>  
>   [2008/07/18 13:12:45, 5] smbd/uid.c:change_to_user(273)
>     change_to_user uid=(500,500) gid=(0,11125)
>
>   Why is the SID not mapped to that uid?

Good question. We'd need a debug level 10 log of that.

> - I'm looking for a generic solution to this problem from a Windows
>   application perspective.  Except that the underlying system is
>   a Samba share, I heve no further knowledge about the underlying
>   system.  I don't know which securty is used and I have no idea
>   about the SIDs used for UNIX users and groups.  I only know the
>   SID of my Windows environment.
>
>   Is there any chance to have a generic solution, except for ignoring
>   file permissions when creating files on Samba?

In theory, creating files with security descriptors should
work fine. However, if you want to create files with
posix-style permissions, one way could be to use the EA path
and pass the permission info along. This would require a
Samba code change however.

> - Last but not least, in the first case, where the descriptor is give
>   to NtCreateFile, why is the file not removed even though NtCreateFile
>   failed?

That's a Samba bug.

Volker

[Corinna Vinschen-4]

On Jul 30 16:15, Volker Lendecke wrote:

> On Fri, Jul 18, 2008 at 02:00:15PM +0200, Corinna Vinschen wrote:
> > - Why does legacy_sid_to_uid fail?  The user with the above SID has been
> >   authenticated correctly and is mapped to a unix user:
> >  
> >   [2008/07/18 13:12:45, 5] smbd/uid.c:change_to_user(273)
> >     change_to_user uid=(500,500) gid=(0,11125)
> >
> >   Why is the SID not mapped to that uid?
>
> Good question. We'd need a debug level 10 log of that.

To the list?  Or PM?

> > - I'm looking for a generic solution to this problem from a Windows
> >   application perspective.  Except that the underlying system is
> >   a Samba share, I heve no further knowledge about the underlying
> >   system.  I don't know which securty is used and I have no idea
> >   about the SIDs used for UNIX users and groups.  I only know the
> >   SID of my Windows environment.
> >
> >   Is there any chance to have a generic solution, except for ignoring
> >   file permissions when creating files on Samba?
>
> In theory, creating files with security descriptors should
> work fine. However, if you want to create files with
> posix-style permissions, one way could be to use the EA path

POSIX-like permissions works fine, as long as the user and group SID
is the UNIX user/group SID.  If I use the Windows user and group,
it fails, apparently because the mapping from the Windows SID to the
UNIX user uid fails in legacy_sid_to_uid.

Does that only work with winbind running, maybe?  What I'm looking for
is a mapping from the Windows user who has authenticated and the UNIX
user it's mapped to in smbusers.  This only seems to work in
change_to_user, but not in legacy_sid_to_uid.  And the way back, from
uid/gid to SID doesn't seem to work at all.

> and pass the permission info along. This would require a
> Samba code change however.

Yes, that's the long term idea.  However, the SID<->uid/gid mapping
is still a problem.  With NFS, you can simply set the permission bits
at NtCreateFile time.  The user is the one you're mapped to using
the user mapping service (whichever is used).

> > - Last but not least, in the first case, where the descriptor is give
> >   to NtCreateFile, why is the file not removed even though NtCreateFile
> >   failed?
>
> That's a Samba bug.

Uh, ok.  Good to know.  Fortunately my workaround to create the file
with default SD and to set the permission bits afterwards works fine
for the time being.


Thanks,
Corinna

[Volker Lendecke]

On Wed, Jul 30, 2008 at 07:26:48PM +0200, Corinna Vinschen wrote:
> > Good question. We'd need a debug level 10 log of that.
>
> To the list?  Or PM?

PM if you like.

> Yes, that's the long term idea.  However, the SID<->uid/gid mapping
> is still a problem.  With NFS, you can simply set the permission bits

Oooohhhh yes. ID mapping is the most controversial topic
that the Samba Team fights to get right for more than 10
years now, and even internally we completely disagree how
this should work. But that's another thread :-)

Volker

[Corinna Vinschen-4]

On Jul 30 22:10, Volker Lendecke wrote:
> On Wed, Jul 30, 2008 at 07:26:48PM +0200, Corinna Vinschen wrote:
> > > Good question. We'd need a debug level 10 log of that.
> >
> > To the list?  Or PM?
>
> PM if you like.

List is fine.  A level 10 log is just a lot of stuff and I wasn't sure
everybody would like it.  The log of the complete operation is attached.

To explain what's going on, I reverted my Samba patch in Cygwin and
called `echo foo > xxx'.  What you see in the log is that Cygwin first
tries to find out if the file exists.  To accomplish transparent
handling of .exe and .lnk (shortcuts as symlinks) suffixes, Cygwin tests
first if "xxx" exists and, if not, if "xxx.exe", "xxx.lnk" or (for
historical reasons) "xxx.exe.lnk" exists.  Then Cygwin fetches file
system information.

When creating the file, NtCreateFile is called with a security
descriptor containing a DACL with three ACEs, the current Windows user
(S-1-5-21-2913048732-1697188782-3448811101-1001), the user's primary
group (S-1-5-21-2913048732-1697188782-3448811101-1125) and Everyone
(S-1-1-0).

That's all.  Apparently Samba knows to switch to the local UNIX user
corinna from the incoming request and creates the file as that user.
But eventually, in the call tyo set_nt_acl, legacy_sid_to_uid doesn't
know about the user mapping anymore and fails.

> > Yes, that's the long term idea.  However, the SID<->uid/gid mapping
> > is still a problem.  With NFS, you can simply set the permission bits
>
> Oooohhhh yes. ID mapping is the most controversial topic
> that the Samba Team fights to get right for more than 10
> years now, and even internally we completely disagree how
> this should work. But that's another thread :-)

:)


Thanks for your help,
Corinna

[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 164
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0xa4
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 11 of length 168
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=164
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=704
  smt_wct=19
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=15872 (0x3E00)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 6144 (0x1800)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=15872 (0x3E00)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=19456 (0x4C00)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]= 6144 (0x1800)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=35840 (0x8C00)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_vwv[18]=    1 (0x1)
  smb_bcc=91
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 10 00 00 00 00  00 00 00 88 00 02 00 00  ........ ........
  [010] 00 00 00 00 00 00 00 80  00 00 00 07 00 00 00 01  ........ ........
  [020] 00 00 00 00 00 20 00 00  00 00 00 18 00 00 00 08  ..... .. ........
  [030] 00 00 00 02 00 00 00 00  00 5C 00 78 00 78 00 78  ........ .\.x.x.x
  [040] 00 00 00 00 00 00 00 00  0C 00 00 4E 66 73 41 63  ........ ...NfsAc
  [050] 74 4F 6E 4C 69 6E 6B 00  00 00 00                 tOnLink. ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBnttrans (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1176)
  call_nt_transact_create
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "xxx"
[2008/07/31 10:26:57, 10] smbd/statcache.c:stat_cache_lookup(215)
  stat_cache_lookup: lookup failed for name [XXX]
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = xxx, dirpath = , start = xxx
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(440)
  New file xxx
[2008/07/31 10:26:57, 10] smbd/trans2.c:read_ea_list_entry(489)
  read_ea_list_entry: read ea name NfsActOnLink
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(xxx) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=xxx, dos_attrs=0x80 access_mask=0x20088 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 5] smbd/open.c:open_file_ntcreate(1264)
  open_file_ntcreate: FILE_OPEN requested for file xxx and file doesn't exist.
[2008/07/31 10:26:57, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(1453) cmd=160 (SMBnttrans) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0xa0
  smb_rcls=52
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=704
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 172
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0xac
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 12 of length 176
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=172
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=768
  smt_wct=19
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=17920 (0x4600)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 6144 (0x1800)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=17920 (0x4600)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=19456 (0x4C00)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]= 6144 (0x1800)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=37888 (0x9400)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_vwv[18]=    1 (0x1)
  smb_bcc=99
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 10 00 00 00 00  00 00 00 88 00 02 00 00  ........ ........
  [010] 00 00 00 00 00 00 00 80  00 00 00 07 00 00 00 01  ........ ........
  [020] 00 00 00 00 00 20 00 00  00 00 00 18 00 00 00 10  ..... .. ........
  [030] 00 00 00 02 00 00 00 00  00 5C 00 78 00 78 00 78  ........ .\.x.x.x
  [040] 00 2E 00 65 00 78 00 65  00 00 00 00 00 00 00 00  ...e.x.e ........
  [050] 0C 00 00 4E 66 73 41 63  74 4F 6E 4C 69 6E 6B 00  ...NfsAc tOnLink.
  [060] 00 00 00                                          ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBnttrans (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1176)
  call_nt_transact_create
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "xxx.exe"
[2008/07/31 10:26:57, 10] smbd/statcache.c:stat_cache_lookup(215)
  stat_cache_lookup: lookup failed for name [XXX.EXE]
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = xxx.exe, dirpath = , start = xxx.exe
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe (len 7) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe (len 7) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe (len 7) ?
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(440)
  New file xxx.exe
[2008/07/31 10:26:57, 10] smbd/trans2.c:read_ea_list_entry(489)
  read_ea_list_entry: read ea name NfsActOnLink
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(xxx.exe) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=xxx.exe, dos_attrs=0x80 access_mask=0x20088 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 5] smbd/open.c:open_file_ntcreate(1264)
  open_file_ntcreate: FILE_OPEN requested for file xxx.exe and file doesn't exist.
[2008/07/31 10:26:57, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(1453) cmd=160 (SMBnttrans) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0xa0
  smb_rcls=52
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=768
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 172
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0xac
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 13 of length 176
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=172
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=832
  smt_wct=19
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=17920 (0x4600)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 6144 (0x1800)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=17920 (0x4600)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=19456 (0x4C00)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]= 6144 (0x1800)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=37888 (0x9400)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_vwv[18]=    1 (0x1)
  smb_bcc=99
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 10 00 00 00 00  00 00 00 88 00 02 00 00  ........ ........
  [010] 00 00 00 00 00 00 00 80  00 00 00 07 00 00 00 01  ........ ........
  [020] 00 00 00 00 00 20 00 00  00 00 00 18 00 00 00 10  ..... .. ........
  [030] 00 00 00 02 00 00 00 00  00 5C 00 78 00 78 00 78  ........ .\.x.x.x
  [040] 00 2E 00 6C 00 6E 00 6B  00 00 00 00 00 00 00 00  ...l.n.k ........
  [050] 0C 00 00 4E 66 73 41 63  74 4F 6E 4C 69 6E 6B 00  ...NfsAc tOnLink.
  [060] 00 00 00                                          ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBnttrans (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1176)
  call_nt_transact_create
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "xxx.lnk"
[2008/07/31 10:26:57, 10] smbd/statcache.c:stat_cache_lookup(215)
  stat_cache_lookup: lookup failed for name [XXX.LNK]
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = xxx.lnk, dirpath = , start = xxx.lnk
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.lnk (len 7) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.lnk (len 7) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.lnk (len 7) ?
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(440)
  New file xxx.lnk
[2008/07/31 10:26:57, 10] smbd/trans2.c:read_ea_list_entry(489)
  read_ea_list_entry: read ea name NfsActOnLink
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(xxx.lnk) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=xxx.lnk, dos_attrs=0x80 access_mask=0x20088 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 5] smbd/open.c:open_file_ntcreate(1264)
  open_file_ntcreate: FILE_OPEN requested for file xxx.lnk and file doesn't exist.
[2008/07/31 10:26:57, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(1453) cmd=160 (SMBnttrans) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0xa0
  smb_rcls=52
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=832
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 180
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0xb4
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 14 of length 184
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=180
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=896
  smt_wct=19
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=19968 (0x4E00)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 6144 (0x1800)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=19968 (0x4E00)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=19456 (0x4C00)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]= 6144 (0x1800)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=39936 (0x9C00)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_vwv[18]=    1 (0x1)
  smb_bcc=107
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 10 00 00 00 00  00 00 00 88 00 02 00 00  ........ ........
  [010] 00 00 00 00 00 00 00 80  00 00 00 07 00 00 00 01  ........ ........
  [020] 00 00 00 00 00 20 00 00  00 00 00 18 00 00 00 18  ..... .. ........
  [030] 00 00 00 02 00 00 00 00  00 5C 00 78 00 78 00 78  ........ .\.x.x.x
  [040] 00 2E 00 65 00 78 00 65  00 2E 00 6C 00 6E 00 6B  ...e.x.e ...l.n.k
  [050] 00 00 00 00 00 00 00 00  0C 00 00 4E 66 73 41 63  ........ ...NfsAc
  [060] 74 4F 6E 4C 69 6E 6B 00  00 00 00                 tOnLink. ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBnttrans (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1176)
  call_nt_transact_create
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "xxx.exe.lnk"
[2008/07/31 10:26:57, 10] smbd/statcache.c:stat_cache_lookup(215)
  stat_cache_lookup: lookup failed for name [XXX.EXE.LNK]
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = xxx.exe.lnk, dirpath = , start = xxx.exe.lnk
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe.lnk (len 11) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe.lnk (len 11) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx.exe.lnk ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx.exe.lnk (len 11) ?
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(440)
  New file xxx.exe.lnk
[2008/07/31 10:26:57, 10] smbd/trans2.c:read_ea_list_entry(489)
  read_ea_list_entry: read ea name NfsActOnLink
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(xxx.exe.lnk) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=xxx.exe.lnk, dos_attrs=0x80 access_mask=0x20088 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 5] smbd/open.c:open_file_ntcreate(1264)
  open_file_ntcreate: FILE_OPEN requested for file xxx.exe.lnk and file doesn't exist.
[2008/07/31 10:26:57, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(1453) cmd=160 (SMBnttrans) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0xa0
  smb_rcls=52
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=896
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 156
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x9c
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 15 of length 160
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=156
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=960
  smt_wct=19
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=13824 (0x3600)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 6144 (0x1800)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=13824 (0x3600)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=19456 (0x4C00)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]= 6144 (0x1800)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=33792 (0x8400)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_vwv[18]=    1 (0x1)
  smb_bcc=83
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 10 00 00 00 00  00 00 00 88 00 02 00 00  ........ ........
  [010] 00 00 00 00 00 00 00 80  00 00 00 07 00 00 00 01  ........ ........
  [020] 00 00 00 00 00 20 00 00  00 00 00 18 00 00 00 00  ..... .. ........
  [030] 00 00 00 02 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [040] 0C 00 00 4E 66 73 41 63  74 4F 6E 4C 69 6E 6B 00  ...NfsAc tOnLink.
  [050] 00 00 00                                          ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBnttrans (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1176)
  call_nt_transact_create
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file ""
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(176)
  conversion finished "" -> .
[2008/07/31 10:26:57, 10] smbd/trans2.c:read_ea_list_entry(489)
  read_ea_list_entry: read ea name NfsActOnLink
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(.) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x20088 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1347)
  open_file_ntcreate: fname=., after mapping access_mask=0x20088
[2008/07/31 10:26:57, 5] smbd/files.c:file_new(123)
  allocated file structure 3656, fnum = 7752 (1 used)
[2008/07/31 10:26:57, 4] smbd/open.c:open_file_ntcreate(1605)
  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x20088, open_access_mask = 0x20088
[2008/07/31 10:26:57, 5] smbd/files.c:file_free(454)
  freed files structure 7752 (0 used)
[2008/07/31 10:26:57, 5] smbd/open.c:open_directory(2057)
  open_directory: opening directory ., access_mask = 0x20088, share_access = 0x7 create_options = 0x200000, create_disposition = 0x1, file_attributes = 0x80
[2008/07/31 10:26:57, 5] smbd/files.c:file_new(123)
  allocated file structure 3657, fnum = 7753 (1 used)
[2008/07/31 10:26:57, 10] locking/locking.c:unparse_share_modes(681)
  unparse_share_modes: del: 0, tok = 0, num: 1
[2008/07/31 10:26:57, 10] locking/locking.c:print_share_mode_table(498)
  print_share_mode_table: share_mode_entry[0]:  pid = 23345, share_access = 0x7, private_options = 0x200000, access_mask = 0x20088, mid = 0x0, type= 0x0, file_id = 4, uid = 500, flags = 2, dev = 0x803, inode = 6799362
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 5] smbd/nttrans.c:call_nt_transact_create(1618)
  call_nt_transact_create: open name = .
[2008/07/31 10:26:57, 9] smbd/nttrans.c:send_nt_replies(230)
  nt_rep: params_sent_thistime = 101, data_sent_thistime = 0, useable_space = 130994
[2008/07/31 10:26:57, 9] smbd/nttrans.c:send_nt_replies(232)
  nt_rep: params_to_send = 101, data_to_send = 0, paramsize = 101, datasize = 0
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=175
  smb_com=0xa0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=960
  smt_wct=18
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=25856 (0x6500)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=25856 (0x6500)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=18944 (0x4A00)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    0 (0x0)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]=    0 (0x0)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=    0 (0x0)
  smb_bcc=104
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 00 00 49 1E 01  00 00 00 00 00 00 00 80  .....I.. ........
  [010] EA 36 2D E7 F2 C8 01 80  9E FB 31 E7 F2 C8 01 80  .6-..... ..1.....
  [020] EA 36 2D E7 F2 C8 01 80  EA 36 2D E7 F2 C8 01 10  .6-..... .6-.....
  [030] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [040] 00 00 00 00 00 07 00 01  00 00 00 00 00 00 00 00  ........ ........
  [050] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [060] FF 01 1F 00 00 00 00 00                           ........
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 72
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x48
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 16 of length 76
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=72
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1024
  smt_wct=15
  smb_vwv[ 0]=    4 (0x4)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    2 (0x2)
  smb_vwv[ 3]=   40 (0x28)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    4 (0x4)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    7 (0x7)
  smb_bcc=7
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 49 1E EC 03                              ...I...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(3244)
  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1004
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo . (fnum = 7753) level=1004 call=7 total_data=0
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 10] smbd/trans2.c:call_trans2qfilepathinfo(3590)
  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
[2008/07/31 10:26:57, 5] smbd/trans2.c:call_trans2qfilepathinfo(3600)
  SMB_QFBI - create: Thu Jul 31 10:26:49 2008
   access: Thu Jul 31 10:26:57 2008
   write: Thu Jul 31 10:26:49 2008
   change: Thu Jul 31 10:26:49 2008
   mode: 10
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=100
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1024
  smt_wct=10
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=   40 (0x28)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    2 (0x2)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   40 (0x28)
  smb_vwv[ 7]=   60 (0x3C)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=45
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 00 00 80 EA 36  2D E7 F2 C8 01 80 9E FB  .......6 -.......
  [010] 31 E7 F2 C8 01 80 EA 36  2D E7 F2 C8 01 80 EA 36  1......6 -......6
  [020] 2D E7 F2 C8 01 10 00 00  00 00 00 00 00           -....... .....
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 70
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x46
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 17 of length 74
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=70
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1088
  smt_wct=15
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  560 (0x230)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    2 (0x2)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    3 (0x3)
  smb_bcc=5
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 05 01                                    .....
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 261
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=76
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1088
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   20 (0x14)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   20 (0x14)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=21
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 2F 00 00 00 FF 00 00  00 08 00 00 00 4E 00 54  ./...... .....N.T
  [010] 00 46 00 53 00                                    .F.S.
[2008/07/31 10:26:57, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 261
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 70
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x46
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 18 of length 74
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=70
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1152
  smt_wct=15
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  560 (0x230)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    2 (0x2)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    3 (0x3)
  smb_bcc=5
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 F0 03                                    .....
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 1008
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=120
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1152
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   64 (0x40)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   64 (0x40)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=65
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........ ........
  [010] 00 61 42 6D 53 00 1E 00  03 00 00 00 00 08 00 00  .aBmS... ........
  [020] 00 30 00 00 00 33 2E 30  2E 33 30 00              .0...3.0 .30.
[2008/07/31 10:26:57, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 1008
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 41
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x29
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 19 of length 45
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=41
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=1216
  smt_wct=3
  smb_vwv[ 0]= 7753 (0x1E49)
  smb_vwv[ 1]=65535 (0xFFFF)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_bcc=0
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBclose (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/reply.c:reply_close(3329)
  close directory fnum=7753
[2008/07/31 10:26:57, 10] locking/locking.c:parse_share_modes(523)
  parse_share_modes: delete_on_close: 0, num_share_modes: 1
[2008/07/31 10:26:57, 10] locking/locking.c:parse_share_modes(623)
  parse_share_modes: share_mode_entry[0]:  pid = 23345, share_access = 0x7, private_options = 0x200000, access_mask = 0x20088, mid = 0x0, type= 0x0, file_id = 4, uid = 500, flags = 2, dev = 0x803, inode = 6799362
[2008/07/31 10:26:57, 5] smbd/files.c:file_free(454)
  freed files structure 7753 (0 used)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=65279
  smb_uid=101
  smb_mid=1216
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 94
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x5e
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 20 of length 98
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=94
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1280
  smt_wct=24
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]= 2048 (0x800)
  smb_vwv[ 3]= 4096 (0x1000)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=  512 (0x200)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    0 (0x0)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]= 1792 (0x700)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=  256 (0x100)
  smb_vwv[18]=    0 (0x0)
  smb_vwv[19]=    0 (0x0)
  smb_vwv[20]=    0 (0x0)
  smb_vwv[21]=  512 (0x200)
  smb_vwv[22]=    0 (0x0)
  smb_vwv[23]=    0 (0x0)
  smb_bcc=11
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] FF 5C 00 78 00 78 00 78  00 00 00                 .\.x.x.x ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBntcreateX (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 10] smbd/nttrans.c:reply_ntcreate_and_X(515)
  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file "xxx"
[2008/07/31 10:26:57, 10] smbd/statcache.c:stat_cache_lookup(215)
  stat_cache_lookup: lookup failed for name [XXX]
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = xxx, dirpath = , start = xxx
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled(276)
  is_mangled xxx ?
[2008/07/31 10:26:57, 10] smbd/mangle_hash2.c:is_mangled_component(215)
  is_mangled_component xxx (len 3) ?
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(440)
  New file xxx
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(xxx) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=xxx, dos_attrs=0x0 access_mask=0x20000 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 5] smbd/open.c:open_file_ntcreate(1264)
  open_file_ntcreate: FILE_OPEN requested for file xxx and file doesn't exist.
[2008/07/31 10:26:57, 3] smbd/error.c:error_packet_set(106)
  error packet at smbd/nttrans.c(805) cmd=162 (SMBntcreateX) NT_STATUS_OBJECT_NAME_NOT_FOUND
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0xa2
  smb_rcls=52
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1280
  smt_wct=0
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 86
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x56
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 21 of length 90
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=86
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1344
  smt_wct=24
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 4096 (0x1000)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=  512 (0x200)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    0 (0x0)
  smb_vwv[14]=    0 (0x0)
  smb_vwv[15]= 1792 (0x700)
  smb_vwv[16]=    0 (0x0)
  smb_vwv[17]=  256 (0x100)
  smb_vwv[18]=    0 (0x0)
  smb_vwv[19]=    0 (0x0)
  smb_vwv[20]=    0 (0x0)
  smb_vwv[21]=  512 (0x200)
  smb_vwv[22]=    0 (0x0)
  smb_vwv[23]=    0 (0x0)
  smb_bcc=3
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00                                          ...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBntcreateX (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 10] smbd/nttrans.c:reply_ntcreate_and_X(515)
  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20000 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file ""
[2008/07/31 10:26:57, 5] smbd/filename.c:unix_convert(176)
  conversion finished "" -> .
[2008/07/31 10:26:57, 3] smbd/dosmode.c:unix_mode(142)
  unix_mode(.) returning 0644
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1184)
  open_file_ntcreate: fname=., dos_attrs=0x0 access_mask=0x20000 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 10] smbd/open.c:open_file_ntcreate(1347)
  open_file_ntcreate: fname=., after mapping access_mask=0x20000
[2008/07/31 10:26:57, 5] smbd/files.c:file_new(123)
  allocated file structure 3658, fnum = 7754 (1 used)
[2008/07/31 10:26:57, 4] smbd/open.c:open_file_ntcreate(1605)
  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x20000, open_access_mask = 0x20000
[2008/07/31 10:26:57, 5] smbd/files.c:file_free(454)
  freed files structure 7754 (0 used)
[2008/07/31 10:26:57, 5] smbd/open.c:open_directory(2057)
  open_directory: opening directory ., access_mask = 0x20000, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x0
[2008/07/31 10:26:57, 5] smbd/files.c:file_new(123)
  allocated file structure 3659, fnum = 7755 (1 used)
[2008/07/31 10:26:57, 10] locking/locking.c:unparse_share_modes(681)
  unparse_share_modes: del: 0, tok = 0, num: 1
[2008/07/31 10:26:57, 10] locking/locking.c:print_share_mode_table(498)
  print_share_mode_table: share_mode_entry[0]:  pid = 23345, share_access = 0x7, private_options = 0x0, access_mask = 0x20000, mid = 0x0, type= 0x0, file_id = 6, uid = 500, flags = 2, dev = 0x803, inode = 6799362
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 5] smbd/nttrans.c:reply_ntcreate_and_X(940)
  reply_ntcreate_and_X: fnum = 7755, open name = .
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=135
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1344
  smt_wct=42
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=19200 (0x4B00)
  smb_vwv[ 3]=  286 (0x11E)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=32768 (0x8000)
  smb_vwv[ 6]=14058 (0x36EA)
  smb_vwv[ 7]=59181 (0xE72D)
  smb_vwv[ 8]=51442 (0xC8F2)
  smb_vwv[ 9]=32769 (0x8001)
  smb_vwv[10]=64414 (0xFB9E)
  smb_vwv[11]=59185 (0xE731)
  smb_vwv[12]=51442 (0xC8F2)
  smb_vwv[13]=32769 (0x8001)
  smb_vwv[14]=14058 (0x36EA)
  smb_vwv[15]=59181 (0xE72D)
  smb_vwv[16]=51442 (0xC8F2)
  smb_vwv[17]=32769 (0x8001)
  smb_vwv[18]=14058 (0x36EA)
  smb_vwv[19]=59181 (0xE72D)
  smb_vwv[20]=51442 (0xC8F2)
  smb_vwv[21]= 4097 (0x1001)
  smb_vwv[22]=    0 (0x0)
  smb_vwv[23]=    0 (0x0)
  smb_vwv[24]=    0 (0x0)
  smb_vwv[25]=    0 (0x0)
  smb_vwv[26]=    0 (0x0)
  smb_vwv[27]=    0 (0x0)
  smb_vwv[28]=    0 (0x0)
  smb_vwv[29]=    0 (0x0)
  smb_vwv[30]=    0 (0x0)
  smb_vwv[31]=    0 (0x0)
  smb_vwv[32]= 1792 (0x700)
  smb_vwv[33]=  256 (0x100)
  smb_vwv[34]=    0 (0x0)
  smb_vwv[35]=    0 (0x0)
  smb_vwv[36]=    0 (0x0)
  smb_vwv[37]=    0 (0x0)
  smb_vwv[38]=    0 (0x0)
  smb_vwv[39]=    0 (0x0)
  smb_vwv[40]=    0 (0x0)
  smb_vwv[41]=    0 (0x0)
  smb_bcc=0
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 72
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x48
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 22 of length 76
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=72
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1408
  smt_wct=15
  smb_vwv[ 0]=    4 (0x4)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    2 (0x2)
  smb_vwv[ 3]=    8 (0x8)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    4 (0x4)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    7 (0x7)
  smb_bcc=7
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 4B 1E EE 03                              ...K...
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(3244)
  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfilepathinfo(3355)
  call_trans2qfilepathinfo . (fnum = 7755) level=1006 call=7 total_data=0
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(371)
  dos_mode: .
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode_from_sbuf(188)
  dos_mode_from_sbuf returning d
[2008/07/31 10:26:57, 8] smbd/dosmode.c:dos_mode(409)
  dos_mode returning d
[2008/07/31 10:26:57, 10] smbd/trans2.c:call_trans2qfilepathinfo(3707)
  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=68
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1408
  smt_wct=10
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=    8 (0x8)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    2 (0x2)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    8 (0x8)
  smb_vwv[ 7]=   60 (0x3C)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=13
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 00 00 02 C0 67  00 03 08 00 00           .......g .....
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 70
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x46
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 23 of length 74
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=70
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1472
  smt_wct=15
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  560 (0x230)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    2 (0x2)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    3 (0x3)
  smb_bcc=5
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 05 01                                    .....
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 261
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=76
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51265
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1472
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   20 (0x14)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   20 (0x14)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=21
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 2F 00 00 00 FF 00 00  00 08 00 00 00 4E 00 54  ./...... .....N.T
  [010] 00 46 00 53 00                                    .F.S.
[2008/07/31 10:26:57, 4] smbd/trans2.c:call_trans2qfsinfo(2745)
  SMBtrans2 info_level = 261
[2008/07/31 10:26:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 70
[2008/07/31 10:26:57, 6] smbd/process.c:process_smb(1068)
  got message type 0x0 of len 0x46
[2008/07/31 10:26:57, 3] smbd/process.c:process_smb(1069)
  Transaction 24 of length 74
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=70
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=652
  smb_uid=101
  smb_mid=1536
  smt_wct=15
  smb_vwv[ 0]=    2 (0x2)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  560 (0x230)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    2 (0x2)
  smb_vwv[10]=   68 (0x44)
  smb_vwv[11]=    0 (0x0)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    1 (0x1)
  smb_vwv[14]=    3 (0x3)
  smb_bcc=5
[2008/07/31 10:26:57, 10] lib/util.c:dump_data(2264)
  [000] 00 00 00 F0 03                                    .....
[2008/07/31 10:26:57, 3] smbd/process.c:switch_message(927)
  switch message SMBtrans2 (pid 23345) conn 0x7f01d4ad2760
[2008/07/31 10:26:57, 4] smbd/uid.c:change_to_user(183)
  change_to_user: Skipping user change - already user
[2008/07/31 10:26:57, 3] smbd/trans2.c:call_trans2qfsinfo(2285)
  call_trans2qfsinfo: level = 1008
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(712)
  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
[2008/07/31 10:26:57, 9] smbd/trans2.c:send_trans2_replies(714)
  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(484)
[2008/07/31 10:26:57, 5] lib/util.c:show_msg(494)
  size=120
  smb_com=0x32
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
&