Hi,
I'm joining the NT4 PDC with my Samba-LDAP Box.
When I execute the following command : net rpc samdump, I get the following
output :
Dumping DOMAIN database
Dumping BUILTIN database
Dumping PRIVS databases
And with the command : net rcp vampire, I get the following output :
Fetching DOMAIN database
Fetching BUILTIN database
But it seems that nothing is imported in LDAP directory or smbpasswd file.
However "net rpc info" give correct information about the domain.
I've setup the loglevel of LDAP to 128 but nothing appears in the log file !
I've attached to this mail the debuglevel=10 for the "net rcp
vampire"
Thank you,
Rapha?l
-------------- next part --------------
[2003/05/22 12:19:39, 5] lib/debug.c:debug_dump_status(359)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
[2003/05/22 12:19:39, 3] param/loadparm.c:lp_load(3881)
lp_load: refreshing parameters
[2003/05/22 12:19:39, 3] param/loadparm.c:init_globals(1267)
Initialising global parameters
[2003/05/22 12:19:39, 3] param/params.c:pm_process(566)
params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"
[2003/05/22 12:19:39, 3] param/loadparm.c:do_section(3397)
Processing section "[global]"
doing parameter workgroup = LSJ.STJOSEPH
doing parameter netbios name = ARAFOX
[2003/05/22 12:19:39, 4] param/loadparm.c:handle_netbios_name(2669)
handle_netbios_name: set global_myname to: ARAFOX
doing parameter server string = ARAFOX
doing parameter encrypt passwords = Yes
doing parameter passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
doing parameter passwd chat = *new*password* %n\n *new*password* %n\n
*successfully*
doing parameter unix password sync = Yes
doing parameter log file = /var/log/samba/%m.log
doing parameter log level = 0 ; remember to lower the log level in real life
:-)
doing parameter max log size = 0
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter domain logons = No
doing parameter os level = 20
doing parameter preferred master = False
doing parameter domain master = False
doing parameter dns proxy = No
doing parameter wins support = No
doing parameter time service = yes
[2003/05/22 12:19:39, 0] param/loadparm.c:map_parameter(2378)
Unknown parameter encountered: "time service"
[2003/05/22 12:19:39, 0] param/loadparm.c:lp_do_parameter(3127)
Ignoring unknown parameter "time service"
doing parameter dos filetimes = yes
doing parameter fake directory create times = yes
doing parameter dos filetime resolution = yes
doing parameter delete readonly = yes
doing parameter printing = lprng
doing parameter character set = iso8859-1
[2003/05/22 12:19:39, 0] param/loadparm.c:map_parameter(2378)
Unknown parameter encountered: "character set"
[2003/05/22 12:19:39, 0] param/loadparm.c:lp_do_parameter(3127)
Ignoring unknown parameter "character set"
doing parameter add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
doing parameter domain admin group = " @"Domain Admins" "
[2003/05/22 12:19:39, 0] param/loadparm.c:map_parameter(2378)
Unknown parameter encountered: "domain admin group"
[2003/05/22 12:19:39, 0] param/loadparm.c:lp_do_parameter(3127)
Ignoring unknown parameter "domain admin group"
doing parameter passdb backend = ldap://localhost
doing parameter ldap suffix = o=chc,c=be
doing parameter ldap admin dn = cn=admin,o=chc,c=be
doing parameter ldap port = 389
doing parameter ldap server = 127.0.0.1
doing parameter ldap ssl = No
[2003/05/22 12:19:39, 4] param/loadparm.c:lp_load(3913)
pm_process() returned Yes
[2003/05/22 12:19:39, 7] param/loadparm.c:lp_servicenumber(4022)
lp_servicenumber: couldn't find homes
[2003/05/22 12:19:39, 10] param/loadparm.c:set_server_role(3844)
set_server_role: role = ROLE_STANDALONE
[2003/05/22 12:19:39, 5] lib/util.c:init_names(270)
Netbios name list:-
my_netbios_names[0]="ARAFOX"
[2003/05/22 12:19:39, 2] lib/interface.c:add_interface(79)
added interface ip=172.19.110.245 bcast=172.19.255.255 nmask=255.255.0.0
[2003/05/22 12:19:39, 10] libsmb/namequery.c:internal_resolve_name(802)
internal_resolve_name: looking up LSJ.STJOSEPH#1b
[2003/05/22 12:19:39, 5] lib/gencache.c:gencache_init(59)
Opening cache file at /var/cache/samba/gencache.tdb
[2003/05/22 12:19:39, 10] lib/gencache.c:gencache_get(263)
Returning expired cache entry: key = NBT/LSJ.STJOSEPH#1B, value =
172.19.100.252, timeout = Thu May 22 12:19:26 2003
[2003/05/22 12:19:39, 5] libsmb/namecache.c:namecache_fetch(203)
no entry for LSJ.STJOSEPH#1B found.
[2003/05/22 12:19:39, 3] libsmb/namequery.c:resolve_lmhosts(722)
resolve_lmhosts: Attempting lmhosts lookup for name LSJ.STJOSEPH<0x1b>
[2003/05/22 12:19:39, 4] libsmb/namequery.c:getlmhostsent(516)
getlmhostsent: lmhost entry: 172.19.100.252 LSJ.STJOSEPH
[2003/05/22 12:19:39, 5] libsmb/namecache.c:namecache_store(130)
namecache_store: storing 1 address for LSJ.STJOSEPH#1b: 172.19.100.252
[2003/05/22 12:19:39, 10] lib/gencache.c:gencache_set(126)
Adding cache entry with key = NBT/LSJ.STJOSEPH#1B; value = 172.19.100.252 and
timeout = Thu May 22 12:19:49 2003
(10 seconds ahead)
[2003/05/22 12:19:39, 10] libsmb/namequery.c:internal_resolve_name(926)
internal_resolve_name: returning 1 addresses: 172.19.100.252
[2003/05/22 12:19:39, 10] libsmb/namequery.c:name_status_find(179)
name_status_find: looking up LSJ.STJOSEPH#1c at 172.19.100.252
[2003/05/22 12:19:39, 10] lib/util_sock.c:open_socket_in(644)
bind succeeded on port 0
[2003/05/22 12:19:39, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (172.19.100.252) on port 137
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_udp_socket(188)
read_udp_socket: lastip 172.19.100.252 lastport 137 read: 283
[2003/05/22 12:19:39, 10] libsmb/nmblib.c:parse_nmb(470)
parse_nmb: packet id = 16037
[2003/05/22 12:19:39, 5] libsmb/nmblib.c:read_packet(719)
Received a packet of len 283 from (172.19.100.252) port 137
[2003/05/22 12:19:39, 4] libsmb/nmblib.c:debug_nmb_packet(106)
nmb packet from 172.19.100.252(137) header: id=16037 opcode=Query(0)
response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=LSJ.STJOSEPH<1c> rr_type=33 rr_class=1 ttl=0
answers 0 char .PISINF01 hex 09504953494E46303120202020202020
answers 10 char .D.LSJ.STJOSEPH hex 0044004C534A2E53544A4F5345504820
answers 20 char ...LSJ.STJOSEP hex 202000C4004C534A2E53544A4F534550
answers 30 char H ...PISINF01 hex 482020201CC400504953494E46303120
answers 40 char D.LSJ.STJ hex 2020202020202044004C534A2E53544A
answers 50 char OSEPH .D.LSJ.S hex 4F534550482020201B44004C534A2E53
answers 60 char TJOSEPH ...LSJ hex 544A4F534550482020201EC4004C534A
answers 70 char .STJOSEPH .D.. hex 2E53544A4F534550482020201D440001
answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4
answers 90 char .PISINF01 hex 00504953494E46303120202020202020
answers a0 char .D.............. hex 0344000004ACBDD9A500000000000000
answers b0 char ................ hex 00000000000000000000000000000000
answers c0 char ................ hex 00000000000000000000000000000000
answers d0 char . hex 00
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
PISINF01#00: flags = 0x44
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
LSJ.STJOSEPH#00: flags = 0xc4
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
LSJ.STJOSEPH#1c: flags = 0xc4
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
PISINF01#20: flags = 0x44
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
LSJ.STJOSEPH#1b: flags = 0x44
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
LSJ.STJOSEPH#1e: flags = 0xc4
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
LSJ.STJOSEPH#1d: flags = 0x44
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
__MSBROWSE__#01: flags = 0xc4
[2003/05/22 12:19:39, 10] libsmb/namequery.c:parse_node_status(67)
PISINF01#03: flags = 0x44
[2003/05/22 12:19:39, 10] libsmb/namequery.c:name_status_find(205)
name_status_find: name found, ip address is 172.19.100.252
[2003/05/22 12:19:39, 3] libsmb/cliconnect.c:cli_full_connection(1216)
Connecting to host=PISINF01 share=IPC$
[2003/05/22 12:19:39, 3] lib/util_sock.c:open_socket_out(676)
Connecting to 172.19.100.252 at port 445
[2003/05/22 12:19:39, 2] lib/util_sock.c:open_socket_out(705)
error connecting to 172.19.100.252:445 (Connection refused)
[2003/05/22 12:19:39, 3] lib/util_sock.c:open_socket_out(676)
Connecting to 172.19.100.252 at port 139
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2003/05/22 12:19:39, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,72)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,72) wrote 72
[2003/05/22 12:19:39, 5] libsmb/cliconnect.c:cli_session_request(1033)
Sent session request
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 0
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=0
smb_com=0x0
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=0
smb_flg2=0
smb_tid=0
smb_pid=0
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=0
[2003/05/22 12:19:39, 10] libsmb/smb_signing.c:cli_check_sign_mac(478)
Can't check signature on short packet! smb_len = 0
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,183)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,183) wrote 183
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 103
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=103
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=23165
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 8 (0x8)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 17 (0x11)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]= 67 (0x43)
smb_vwv[11]=36864 (0x9000)
smb_vwv[12]=47647 (0xBA1F)
smb_vwv[13]=19455 (0x4BFF)
smb_vwv[14]=49952 (0xC320)
smb_vwv[15]=34817 (0x8801)
smb_vwv[16]= 2303 (0x8FF)
smb_bcc=34
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 1E 90 98 5B 05 3A 31 4A 4C 00 53 00 4A 00 2E 00 ...[.:1J L.S.J...
[010] 53 00 54 00 4A 00 4F 00 53 00 45 00 50 00 48 00 S.T.J.O. S.E.P.H.
[020] 00 00 ..
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=103
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=23165
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 8 (0x8)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 17 (0x11)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]= 67 (0x43)
smb_vwv[11]=36864 (0x9000)
smb_vwv[12]=47647 (0xBA1F)
smb_vwv[13]=19455 (0x4BFF)
smb_vwv[14]=49952 (0xC320)
smb_vwv[15]=34817 (0x8801)
smb_vwv[16]= 2303 (0x8FF)
smb_bcc=34
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 1E 90 98 5B 05 3A 31 4A 4C 00 53 00 4A 00 2E 00 ...[.:1J L.S.J...
[010] 53 00 54 00 4A 00 4F 00 53 00 45 00 50 00 48 00 S.T.J.O. S.E.P.H.
[020] 00 00 ..
[2003/05/22 12:19:39, 4] lib/time.c:get_serverzone(122)
Serverzone is -7200
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,92)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,92) wrote 92
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 136
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=136
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=3
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 136 (0x88)
smb_vwv[ 2]= 0 (0x0)
smb_bcc=95
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s.
[010] 00 4E 00 54 00 20 00 34 00 2E 00 30 00 00 00 4E .N.T. .4 ...0...N
[020] 00 54 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 .T. .L.A .N. .M.a
[030] 00 6E 00 61 00 67 00 65 00 72 00 20 00 34 00 2E .n.a.g.e .r. .4..
[040] 00 30 00 00 00 4C 00 53 00 4A 00 2E 00 53 00 54 .0...L.S .J...S.T
[050] 00 4A 00 4F 00 53 00 45 00 50 00 48 00 00 00 .J.O.S.E .P.H...
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=136
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=3
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 136 (0x88)
smb_vwv[ 2]= 0 (0x0)
smb_bcc=95
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s.
[010] 00 4E 00 54 00 20 00 34 00 2E 00 30 00 00 00 4E .N.T. .4 ...0...N
[020] 00 54 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 .T. .L.A .N. .M.a
[030] 00 6E 00 61 00 67 00 65 00 72 00 20 00 34 00 2E .n.a.g.e .r. .4..
[040] 00 30 00 00 00 4C 00 53 00 4A 00 2E 00 53 00 54 .0...L.S .J...S.T
[050] 00 4A 00 4F 00 53 00 45 00 50 00 48 00 00 00 .J.O.S.E .P.H...
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,84)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,84) wrote 84
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 48
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=48
smb_com=0x75
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=3
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 48 (0x30)
smb_vwv[ 2]= 1 (0x1)
smb_bcc=7
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 49 50 43 00 00 00 00 IPC....
[2003/05/22 12:19:39, 10] libsmb/clientgen.c:cli_init_creds(211)
cli_init_creds: user domain flgs: 0
ntlmssp_cli_flgs:0
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,108)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,108) wrote 108
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 103
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=103
smb_com=0xa2
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=34
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 103 (0x67)
smb_vwv[ 2]= 1792 (0x700)
smb_vwv[ 3]= 264 (0x108)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_vwv[12]= 0 (0x0)
smb_vwv[13]= 0 (0x0)
smb_vwv[14]= 0 (0x0)
smb_vwv[15]= 0 (0x0)
smb_vwv[16]= 0 (0x0)
smb_vwv[17]= 0 (0x0)
smb_vwv[18]= 0 (0x0)
smb_vwv[19]= 0 (0x0)
smb_vwv[20]= 0 (0x0)
smb_vwv[21]=32768 (0x8000)
smb_vwv[22]= 0 (0x0)
smb_vwv[23]= 0 (0x0)
smb_vwv[24]= 16 (0x10)
smb_vwv[25]= 0 (0x0)
smb_vwv[26]= 0 (0x0)
smb_vwv[27]= 0 (0x0)
smb_vwv[28]= 0 (0x0)
smb_vwv[29]= 0 (0x0)
smb_vwv[30]= 0 (0x0)
smb_vwv[31]= 512 (0x200)
smb_vwv[32]=65280 (0xFF00)
smb_vwv[33]= 5 (0x5)
smb_bcc=0
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1454)
Bind RPC Pipe[807]: \PIPE\NETLOGON
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1292)
Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB
xV4.4... ...#Eg..
[010] 01 00 00 00 ....
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1295)
Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60
.]...... ....+.H`
[010] 02 00 00 00 ....
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 0b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0048
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_rb
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_bba
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0010 max_tsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0012 max_rsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0014 assoc_gid: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0018 num_elements: 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
001c context_id : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
001e num_syntaxes: 01
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00001f smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0020 data : 12345678
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0024 data : 1234
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0026 data : abcd
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0028 data : ef 00 01 23 45 67 cf fb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 version: 00000001
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000034 smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0034 data : 8a885d04
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0038 data : 1ceb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
003a data : 11c9
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
003c data : 9f e8 08 00 2b 10 48 60
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0044 version: 00000002
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:807
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=154
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 72 (0x48)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 72 (0x48)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2055 (0x807)
smb_bcc=87
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 30 .......H .......0
[020] 16 30 16 00 00 00 00 01 00 00 00 00 00 01 00 78 .0...... .......x
[030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg...
[040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+
[050] 10 48 60 02 00 00 00 .H`....
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,158)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,158) wrote 158
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 124
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=124
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 68 (0x44)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 68 (0x44)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=69
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D......
[010] 00 30 16 30 16 D9 7D 02 00 0C 00 5C 50 49 50 45 .0.0..}. ...\PIPE
[020] 5C 6C 73 61 73 73 00 28 16 01 00 00 00 00 00 00 \lsass.( ........
[030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H
[040] 60 02 00 00 00 `....
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=124
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 68 (0x44)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 68 (0x44)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=69
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D......
[010] 00 30 16 30 16 D9 7D 02 00 0C 00 5C 50 49 50 45 .0.0..}. ...\PIPE
[020] 5C 6C 73 61 73 73 00 28 16 01 00 00 00 00 00 00 \lsass.( ........
[030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H
[040] 60 02 00 00 00 `....
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 68
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 0c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0044
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000001
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 68
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1481)
rpc_pipe_bind: rpc_api_pipe returned OK.
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_ba
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_bba
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0010 max_tsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0012 max_rsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0014 assoc_gid: 00027dd9
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_rpc_addr_str
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0018 len: 000c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
001a str: \PIPE\lsass.
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000026 smb_io_rpc_results
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0028 num_results: 01
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
002c result : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
002e reason : 0000
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000030 smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 data : 8a885d04
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0034 data : 1ceb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0036 data : 11c9
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0038 data : 9f e8 08 00 2b 10 48 60
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0040 version: 00000002
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:check_bind_response(1325)
bind_rpc_pipe: server pipe_name found: \PIPE\lsass
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:check_bind_response(1345)
bind_rpc_pipe: accepted!
[2003/05/22 12:19:39, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(256)
Using ADS machine password
[2003/05/22 12:19:39, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
cli_net_req_chal: LSA Request Challenge from ARAFOX to PISINF01:
485405ED72C33A35
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_q_req_chal(538)
init_q_req_chal: 538
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_q_req_chal(547)
init_q_req_chal: 547
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 net_io_q_req_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0000 undoc_buffer: 00000001
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000004 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 uni_max_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c uni_str_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0010 buffer : \.\.P.I.S.I.N.F.0.1...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000026 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 uni_max_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 uni_str_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0034 buffer : A.R.A.F.O.X...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000042 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0042 data: 48 54 05 ed 72 c3 3a 35
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:create_rpc_request(872)
create_rpc_request: opnum: 0x4 data_len: 0x62
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:create_rpc_request(889)
create_rpc_request: data_len: 62 auth_len: 0 alloc_hint: 52
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0062
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000002
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000052
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 0004
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:807
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=180
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 98 (0x62)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 5680 (0x1630)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 98 (0x62)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2055 (0x807)
smb_bcc=113
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 62 00 00 00 02 00 00 00 52 .......b .......R
[020] 00 00 00 00 00 04 00 01 00 00 00 0B 00 00 00 00 ........ ........
[030] 00 00 00 0B 00 00 00 5C 00 5C 00 50 00 49 00 53 .......\ .\.P.I.S
[040] 00 49 00 4E 00 46 00 30 00 31 00 00 00 00 00 07 .I.N.F.0 .1......
[050] 00 00 00 00 00 00 00 07 00 00 00 41 00 52 00 41 ........ ...A.R.A
[060] 00 46 00 4F 00 58 00 00 00 48 54 05 ED 72 C3 3A .F.O.X.. .HT..r.:
[070] 35 5
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,184)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,184) wrote 184
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 92
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=92
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 36 (0x24)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 36 (0x24)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=37
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 62 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 b....... .$......
[010] 00 0C 00 00 00 00 00 00 00 6D 3B 01 BC B0 01 00 ........ .m;.....
[020] 00 00 00 00 00 .....
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=92
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 36 (0x24)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 36 (0x24)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=37
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 62 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 b....... .$......
[010] 00 0C 00 00 00 00 00 00 00 6D 3B 01 BC B0 01 00 ........ .m;.....
[020] 00 00 00 00 00 .....
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 36
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0024
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000002
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 0000000c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 36
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_req_chal
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data: 6d 3b 01 bc b0 01 00 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0020 status: NT_STATUS_OK
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_session_key(59)
cred_session_key
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_session_key(61)
clnt_chal: 485405ED72C33A35
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_session_key(62)
srv_chal : 6D3B01BCB0010000
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_session_key(63)
clnt+srv : B58F06A922C53A35
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_session_key(64)
sess_key : 0E299404E8BB1954
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(92)
sess_key : 0E299404E8BB1954
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 485405ED72C33A35
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(94)
timestamp: 0
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(95)
timecred : 485405ED72C33A35
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 70C2D163E64C1F4C
[2003/05/22 12:19:39, 4] rpc_client/cli_netlogon.c:cli_net_auth2(102)
cli_net_auth2: srv:\\PISINF01 acct:ARAFOX$ sc:2 mc: ARAFOX chal
70C2D163E64C1F4C neg: 400001ff
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_q_auth_2(659)
init_q_auth_2: 659
[2003/05/22 12:19:39, 5] rpc_parse/parse_misc.c:init_log_info(1283)
make_log_info 1283
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_q_auth_2(665)
init_q_auth_2: 665
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 net_io_q_auth_2
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_log_info
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0000 undoc_buffer: 00000001
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000004 smb_io_unistr2 unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 uni_max_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c uni_str_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0010 buffer : \.\.P.I.S.I.N.F.0.1...
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000026 smb_io_unistr2 unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 uni_max_len: 00000008
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 uni_str_len: 00000008
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0034 buffer : A.R.A.F.O.X.$...
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0044 sec_chan: 0002
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000046 smb_io_unistr2 unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0048 uni_max_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
004c undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0050 uni_str_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0054 buffer : A.R.A.F.O.X...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000062 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0062 data: 70 c2 d1 63 e6 4c 1f 4c
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00006a net_io_neg_flags
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
006c neg_flags: 400001ff
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:create_rpc_request(872)
create_rpc_request: opnum: 0xf data_len: 0x88
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:create_rpc_request(889)
create_rpc_request: data_len: 88 auth_len: 0 alloc_hint: 78
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0088
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000003
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000078
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 000f
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:807
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=218
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 136 (0x88)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 5680 (0x1630)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 136 (0x88)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2055 (0x807)
smb_bcc=151
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 88 00 00 00 03 00 00 00 78 ........ .......x
[020] 00 00 00 00 00 0F 00 01 00 00 00 0B 00 00 00 00 ........ ........
[030] 00 00 00 0B 00 00 00 5C 00 5C 00 50 00 49 00 53 .......\ .\.P.I.S
[040] 00 49 00 4E 00 46 00 30 00 31 00 00 00 00 00 08 .I.N.F.0 .1......
[050] 00 00 00 00 00 00 00 08 00 00 00 41 00 52 00 41 ........ ...A.R.A
[060] 00 46 00 4F 00 58 00 24 00 00 00 02 00 00 00 07 .F.O.X.$ ........
[070] 00 00 00 00 00 00 00 07 00 00 00 41 00 52 00 41 ........ ...A.R.A
[080] 00 46 00 4F 00 58 00 00 00 70 C2 D1 63 E6 4C 1F .F.O.X.. .p..c.L.
[090] 4C 00 00 FF 01 00 40 L.....@
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,222)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,222) wrote 222
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 96
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=96
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 40 (0x28)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 40 (0x28)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=41
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 88 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(......
[010] 00 10 00 00 00 00 00 00 00 9D 76 B2 2B CF FF 44 ........ ..v.+..D
[020] A0 FF 01 00 40 00 00 00 00 ....@... .
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=96
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 40 (0x28)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 40 (0x28)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=41
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 88 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(......
[010] 00 10 00 00 00 00 00 00 00 9D 76 B2 2B CF FF 44 ........ ..v.+..D
[020] A0 FF 01 00 40 00 00 00 00 ....@... .
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 40
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0028
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000003
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000010
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 40
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_auth_2
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data: 9d 76 b2 2b cf ff 44 a0
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000020 net_io_neg_flags
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0020 neg_flags: 400001ff
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0024 status: NT_STATUS_OK
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(92)
sess_key : 0E299404E8BB1954
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 6D3B01BCB0010000
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(94)
timestamp: 0
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(95)
timecred : 6D3B01BCB0010000
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 9D76B22BCFFF44A0
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_assert(123)
challenge : 9D76B22BCFFF44A0
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_assert(124)
calculated: 9D76B22BCFFF44A0
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_assert(128)
credentials check ok
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,108)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,108) wrote 108
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 103
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=103
smb_com=0xa2
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=34
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 103 (0x67)
smb_vwv[ 2]= 2048 (0x800)
smb_vwv[ 3]= 264 (0x108)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 0 (0x0)
smb_vwv[11]= 0 (0x0)
smb_vwv[12]= 0 (0x0)
smb_vwv[13]= 0 (0x0)
smb_vwv[14]= 0 (0x0)
smb_vwv[15]= 0 (0x0)
smb_vwv[16]= 0 (0x0)
smb_vwv[17]= 0 (0x0)
smb_vwv[18]= 0 (0x0)
smb_vwv[19]= 0 (0x0)
smb_vwv[20]= 0 (0x0)
smb_vwv[21]=32768 (0x8000)
smb_vwv[22]= 0 (0x0)
smb_vwv[23]= 0 (0x0)
smb_vwv[24]= 16 (0x10)
smb_vwv[25]= 0 (0x0)
smb_vwv[26]= 0 (0x0)
smb_vwv[27]= 0 (0x0)
smb_vwv[28]= 0 (0x0)
smb_vwv[29]= 0 (0x0)
smb_vwv[30]= 0 (0x0)
smb_vwv[31]= 512 (0x200)
smb_vwv[32]=65280 (0xFF00)
smb_vwv[33]= 5 (0x5)
smb_bcc=0
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1454)
Bind RPC Pipe[808]: \PIPE\NETLOGON
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1292)
Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB
xV4.4... ...#Eg..
[010] 01 00 00 00 ....
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:valid_pipe_name(1295)
Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60
.]...... ....+.H`
[010] 02 00 00 00 ....
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth hdr_auth
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_neg netsec_neg
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 type1: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c type2: 00000003
[2003/05/22 12:19:39, 6] lib/util.c:dump_data(1886)
[000] 4C 53 4A 2E 53 54 4A 4F 53 45 50 48 LSJ.STJO SEPH
[2003/05/22 12:19:39, 6] lib/util.c:dump_data(1886)
[000] 41 52 41 46 4F 58 ARAFOX
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 0b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 006c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 001c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000004
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_rb
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_bba
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0010 max_tsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0012 max_rsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0014 assoc_gid: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0018 num_elements: 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
001c context_id : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
001e num_syntaxes: 01
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00001f smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0020 data : 12345678
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0024 data : 1234
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0026 data : abcd
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0028 data : ef 00 01 23 45 67 cf fb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 version: 00000001
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000034 smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0034 data : 8a885d04
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0038 data : 1ceb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
003a data : 11c9
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
003c data : 9f e8 08 00 2b 10 48 60
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0044 version: 00000002
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:808
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=190
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 108 (0x6C)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 5680 (0x1630)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 108 (0x6C)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2056 (0x808)
smb_bcc=123
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 0B 03 10 00 00 00 6C 00 1C 00 04 00 00 00 30 .......l .......0
[020] 16 30 16 00 00 00 00 01 00 00 00 00 00 01 00 78 .0...... .......x
[030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.... ..#Eg...
[040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+
[050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........
[060] 00 00 00 03 00 00 00 4C 53 4A 2E 53 54 4A 4F 53 .......L SJ.STJOS
[070] 45 50 48 00 41 52 41 46 4F 58 00 EPH.ARAF OX.
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,194)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,194) wrote 194
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 144
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 6C 05 00 0C 03 10 00 00 00 58 00 0C 00 04 00 00 l....... .X......
[010] 00 30 16 30 16 DA 7D 02 00 0C 00 5C 50 49 50 45 .0.0..}. ...\PIPE
[020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........
[030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H
[040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........
[050] 00 00 00 00 00 00 C4 17 C0 ........ .
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=144
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 88 (0x58)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 88 (0x58)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=89
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 6C 05 00 0C 03 10 00 00 00 58 00 0C 00 04 00 00 l....... .X......
[010] 00 30 16 30 16 DA 7D 02 00 0C 00 5C 50 49 50 45 .0.0..}. ...\PIPE
[020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........
[030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H
[040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........
[050] 00 00 00 00 00 00 C4 17 C0 ........ .
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 88
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 0c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0058
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 000c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000004
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 88
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(200)
rpc_auth_pipe: len: 88 auth_len: 12 verify No seal No schannel Yes
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(1481)
rpc_pipe_bind: rpc_api_pipe returned OK.
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_ba
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_bba
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0010 max_tsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0012 max_rsize: 1630
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0014 assoc_gid: 00027dda
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_rpc_addr_str
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0018 len: 000c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
001a str: \PIPE\lsass.
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000026 smb_io_rpc_results
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0028 num_results: 01
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
002c result : 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
002e reason : 0000
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000030 smb_io_rpc_iface
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 data : 8a885d04
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0034 data : 1ceb
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0036 data : 11c9
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0038 data : 9f e8 08 00 2b 10 48 60
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0040 version: 00000002
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:check_bind_response(1325)
bind_rpc_pipe: server pipe_name found: \PIPE\lsass
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:check_bind_response(1345)
bind_rpc_pipe: accepted!
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(92)
sess_key : 0E299404E8BB1954
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 70C2D163E64C1F4C
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3ecca43b
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(95)
timecred : AB669EA2E64C1F4C
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 230B36D10809E4A1
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_net_q_sam_sync(1670)
init_q_sam_sync
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 net_io_q_sam_sync
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0000 uni_max_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 uni_str_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
000c buffer : \.\.P.I.S.I.N.F.0.1...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000022 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 uni_max_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c uni_str_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0030 buffer : A.R.A.F.O.X...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00003e smb_io_cred
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000040 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0040 data: 23 0b 36 d1 08 09 e4 a1
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000048 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0048 time: 3ecca43b
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00004c smb_io_cred
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
00004c smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
004c data: 00 00 00 00 00 00 00 00
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000054 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0054 time: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0058 database_id : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
005c restart_state: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0060 sync_context : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0064 max_size: 0000ffff
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:create_rpc_request(872)
create_rpc_request: opnum: 0x10 data_len: 0xa8
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:create_rpc_request(889)
create_rpc_request: data_len: a8 auth_len: 20 alloc_hint: 70
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 00a8
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000005
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000070
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 0010
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1082)
SCHANNEL seq_num=0
[2003/05/22 12:19:39, 10] rpc_parse/parse_prs.c:netsec_encode(1407)
SCHANNEL: netsec_encode seq_num=0 data_len=104
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000080 smb_io_rpc_hdr_auth hdr_auth
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0080 auth_type : 44
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0081 auth_level : 06
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0082 padding : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0083 reserved : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0084 auth_context : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000088 smb_io_rpc_auth_netsec_chk
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0088 sig : 77 00 7a 00 ff ff 00 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0090 data3: 31 58 d4 44 29 3d 35 c0
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0098 data1: 71 4b b7 66 98 f4 82 02
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
00a0 data8: 9f d1 d3 7d 74 75 ac 39
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:808
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=250
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 168 (0xA8)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 5680 (0x1630)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 168 (0xA8)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2056 (0x808)
smb_bcc=183
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 A8 00 20 00 05 00 00 00 70 ........ . .....p
[020] 00 00 00 00 00 10 00 94 D1 D3 7D 74 75 AC 39 1A ........ ..}tu.9.
[030] BA B8 A7 F8 45 7A AE 9B 7B FD 01 DF D3 61 9C 29 ....Ez.. {....a.)
[040] AE AB 10 58 0A 25 F8 02 8A EA 98 FE BB 09 5D CA ...X.%.. ......].
[050] 66 A3 0A 10 64 54 A7 AE E2 4C 6D 34 20 B9 CC F0 f...dT.. .Lm4 ...
[060] E1 2F 80 6B B4 3E DE 5E 1F E6 55 F3 D4 78 58 0F ./.k.>.^ ..U..xX.
[070] B5 8D 6C 13 EF 5C 24 0D 63 49 70 0E D9 56 A8 72 ..l..\$. cIp..V.r
[080] FB 60 D8 EA 82 41 51 D7 D8 E0 F2 2E 4E A5 AB 44 .`...AQ. ....N..D
[090] 06 00 00 01 00 00 00 77 00 7A 00 FF FF 00 00 31 .......w .z.....1
[0A0] 58 D4 44 29 3D 35 C0 71 4B B7 66 98 F4 82 02 9F X.D)=5.q K.f.....
[0B0] D1 D3 7D 74 75 AC 39 ..}tu.9
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,254)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,254) wrote 254
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 152
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] A8 05 00 02 03 10 00 00 00 60 00 20 00 05 00 00 ........ .`. ....
[010] 00 20 00 00 00 00 00 00 00 D9 9A 5E 15 73 A8 A4 . ...... ...^.s..
[020] 69 A3 D8 F3 7F DF 0B 94 D1 7B 6D 35 AF 08 00 95 i....... .{m5....
[030] 2D 44 A8 14 1A 10 A2 83 7A 44 06 00 00 01 00 00 -D...... zD......
[040] 00 77 00 7A 00 FF FF 00 00 7E E8 AF 57 2F 65 20 .w.z.... .~..W/e
[050] 99 10 86 60 5B 89 81 1A C8 A6 A8 19 00 17 75 AE ...`[... ......u.
[060] 92 .
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] A8 05 00 02 03 10 00 00 00 60 00 20 00 05 00 00 ........ .`. ....
[010] 00 20 00 00 00 00 00 00 00 D9 9A 5E 15 73 A8 A4 . ...... ...^.s..
[020] 69 A3 D8 F3 7F DF 0B 94 D1 7B 6D 35 AF 08 00 95 i....... .{m5....
[030] 2D 44 A8 14 1A 10 A2 83 7A 44 06 00 00 01 00 00 -D...... zD......
[040] 00 77 00 7A 00 FF FF 00 00 7E E8 AF 57 2F 65 20 .w.z.... .~..W/e
[050] 99 10 86 60 5B 89 81 1A C8 A6 A8 19 00 17 75 AE ...`[... ......u.
[060] 92 .
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 96
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0060
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000005
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(200)
rpc_auth_pipe: len: 96 auth_len: 32 verify No seal No schannel Yes
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(339)
rpc_auth_pipe: schannel verify netsec
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth auth_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0008 sig : 77 00 7a 00 ff ff 00 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0010 data3: 7e e8 af 57 2f 65 20 99
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data1: 10 86 60 5b 89 81 1a c8
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0020 data8: a6 a8 19 00 17 75 ae 92
[2003/05/22 12:19:39, 10] rpc_parse/parse_prs.c:netsec_decode(1473)
SCHANNEL: netsec_decode seq_num=2 data_len=32
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_sam_sync
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_cred srv_creds
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data: 00 00 00 00 00 00 00 00
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000020 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0020 time: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 sync_context: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 ptr_deltas: 01a07638
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c num_deltas : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 ptr_deltas2: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0034 status: NT_STATUS_ACCESS_DENIED
[2003/05/22 12:19:39, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(92)
sess_key : 0E299404E8BB1954
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(93)
stor_cred: 70C2D163E64C1F4C
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(94)
timestamp: 3ecca43b
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(95)
timecred : AB669EA2E64C1F4C
[2003/05/22 12:19:39, 5] libsmb/credentials.c:cred_create(96)
calc_cred: 230B36D10809E4A1
[2003/05/22 12:19:39, 5] rpc_parse/parse_net.c:init_net_q_sam_sync(1670)
init_q_sam_sync
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 net_io_q_sam_sync
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0000 uni_max_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0008 uni_str_len: 0000000b
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
000c buffer : \.\.P.I.S.I.N.F.0.1...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000022 smb_io_unistr2
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 uni_max_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 undoc : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c uni_str_len: 00000007
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:dbg_rw_punival(806)
0030 buffer : A.R.A.F.O.X...
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00003e smb_io_cred
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000040 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0040 data: 23 0b 36 d1 08 09 e4 a1
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000048 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0048 time: 3ecca43b
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
00004c smb_io_cred
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
00004c smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
004c data: 00 00 00 00 00 00 00 00
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000054 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0054 time: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0058 database_id : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
005c restart_state: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0060 sync_context : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0064 max_size: 0000ffff
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:create_rpc_request(872)
create_rpc_request: opnum: 0x10 data_len: 0xa8
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:create_rpc_request(889)
create_rpc_request: data_len: a8 auth_len: 20 alloc_hint: 70
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 00a8
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000006
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_req hdr_req
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000070
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0016 opnum : 0010
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:rpc_api_pipe_req(1082)
SCHANNEL seq_num=2
[2003/05/22 12:19:39, 10] rpc_parse/parse_prs.c:netsec_encode(1407)
SCHANNEL: netsec_encode seq_num=2 data_len=104
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000080 smb_io_rpc_hdr_auth hdr_auth
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0080 auth_type : 44
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0081 auth_level : 06
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0082 padding : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0083 reserved : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0084 auth_context : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000088 smb_io_rpc_auth_netsec_chk
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0088 sig : 77 00 7a 00 ff ff 00 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0090 data3: d6 23 cf d3 9b 2c 89 8c
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0098 data1: 9a fc 39 0f 97 66 c5 8e
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
00a0 data8: da 56 51 a9 73 22 50 9e
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(428)
rpc_api_pipe: fnum:808
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=250
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=16
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 168 (0xA8)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 5680 (0x1630)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_vwv[10]= 82 (0x52)
smb_vwv[11]= 168 (0xA8)
smb_vwv[12]= 82 (0x52)
smb_vwv[13]= 2 (0x2)
smb_vwv[14]= 38 (0x26)
smb_vwv[15]= 2056 (0x808)
smb_bcc=183
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\....
[010] 00 00 03 10 00 00 00 A8 00 20 00 06 00 00 00 70 ........ . .....p
[020] 00 00 00 00 00 10 00 D1 56 51 A9 73 22 50 9E 5C ........ VQ.s"P.\
[030] C8 A8 40 5C E5 4E 2E 7C 77 DA 88 A6 50 00 FD 55 ..@\.N.| w...P..U
[040] F0 C1 4D 01 CA 71 80 43 64 B8 A4 10 D3 5B 06 FD ..M..q.C d....[..
[050] C8 26 59 33 48 D8 7C 7B 28 34 BF C2 90 8C DF C6 .&Y3H.|{ (4......
[060] 16 39 9A 2F A7 0A BE BB D8 A6 6F D6 C3 C5 14 14 .9./.... ..o.....
[070] 3E 7F 0E 43 D3 D5 FA 71 A8 17 78 32 65 B8 37 44 >..C...q ..x2e.7D
[080] B8 0D C2 5B 9A 75 BC 02 59 FA 69 48 A9 A8 B2 44 ...[.u.. Y.iH...D
[090] 06 00 00 01 00 00 00 77 00 7A 00 FF FF 00 00 D6 .......w .z......
[0A0] 23 CF D3 9B 2C 89 8C 9A FC 39 0F 97 66 C5 8E DA #...,... .9..f...
[0B0] 56 51 A9 73 22 50 9E VQ.s"P.
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,254)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,254) wrote 254
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 152
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] A8 05 00 02 03 10 00 00 00 60 00 20 00 06 00 00 ........ .`. ....
[010] 00 20 00 00 00 00 00 00 00 57 76 EA 2B 82 B7 FA . ...... .Wv.+...
[020] 8E 78 3F 9B FD 3A 90 34 18 35 60 97 65 F3 5E 79 .x?..:.4 .5`.e.^y
[030] 84 98 E8 0E A1 D6 98 16 90 44 06 00 00 01 00 00 ........ .D......
[040] 00 77 00 7A 00 FF FF 00 00 E2 2D B8 B4 4F CD C7 .w.z.... ..-..O..
[050] CF 34 B2 30 05 64 88 49 74 57 D1 AD AF 3C 15 1B .4.0.d.I tW...<..
[060] 97 .
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=152
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 96 (0x60)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 96 (0x60)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=97
[2003/05/22 12:19:39, 10] lib/util.c:dump_data(1886)
[000] A8 05 00 02 03 10 00 00 00 60 00 20 00 06 00 00 ........ .`. ....
[010] 00 20 00 00 00 00 00 00 00 57 76 EA 2B 82 B7 FA . ...... .Wv.+...
[020] 8E 78 3F 9B FD 3A 90 34 18 35 60 97 65 F3 5E 79 .x?..:.4 .5`.e.^y
[030] 84 98 E8 0E A1 D6 98 16 90 44 06 00 00 01 00 00 ........ .D......
[040] 00 77 00 7A 00 FF FF 00 00 E2 2D B8 B4 4F CD C7 .w.z.... ..-..O..
[050] CF 34 B2 30 05 64 88 49 74 57 D1 AD AF 3C 15 1B .4.0.d.I tW...<..
[060] 97 .
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_check_hdr(114)
rpc_check_hdr: rdata->data_size = 96
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr rpc_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 major : 05
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 minor : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 pkt_type : 02
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 flags : 03
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0004 pack_type0: 10
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0005 pack_type1: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0006 pack_type2: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0007 pack_type3: 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0008 frag_len : 0060
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
000a auth_len : 0020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
000c call_id : 00000006
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0010 alloc_hint: 00000020
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint16(605)
0014 context_id: 0000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0016 cancel_ct : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0017 reserved : 00
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_api_pipe(489)
rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/05/22 12:19:39, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(200)
rpc_auth_pipe: len: 96 auth_len: 32 verify No seal No schannel Yes
[2003/05/22 12:19:39, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(339)
rpc_auth_pipe: schannel verify netsec
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000000 smb_io_rpc_hdr_auth auth_hdr
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0000 auth_type : 44
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0001 auth_level : 06
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0002 padding : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8(576)
0003 reserved : 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0004 auth_context : 00000001
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0008 sig : 77 00 7a 00 ff ff 00 00
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0010 data3: e2 2d b8 b4 4f cd c7 cf
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data1: 34 b2 30 05 64 88 49 74
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0020 data8: 57 d1 ad af 3c 15 1b 97
[2003/05/22 12:19:39, 10] rpc_parse/parse_prs.c:netsec_decode(1473)
SCHANNEL: netsec_decode seq_num=4 data_len=32
[2003/05/22 12:19:39, 6] rpc_client/cli_pipe.c:rpc_api_pipe(530)
rpc_api_pipe: fragment first and last both set
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_debug(81)
000018 net_io_r_sam_sync
[2003/05/22 12:19:39, 6] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_cred srv_creds
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000018 smb_io_chal
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
0018 data: 00 00 00 00 00 00 00 00
[2003/05/22 12:19:39, 7] rpc_parse/parse_prs.c:prs_debug(81)
000020 smb_io_utime
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0020 time: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0024 sync_context: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0028 ptr_deltas: 01a07638
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
002c num_deltas : 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_uint32(634)
0030 ptr_deltas2: 00000000
[2003/05/22 12:19:39, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
0034 status: NT_STATUS_ACCESS_DENIED
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,45)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,45) wrote 45
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 35
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=0
smb_bcc=0
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(407)
write_socket(5,45)
[2003/05/22 12:19:39, 6] lib/util_sock.c:write_socket(410)
write_socket(5,45) wrote 45
[2003/05/22 12:19:39, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
got smb length of 35
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(456)
[2003/05/22 12:19:39, 5] lib/util.c:show_msg(466)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=2055
smb_pid=23165
smb_uid=4099
smb_mid=1
smt_wct=0
smb_bcc=0
[2003/05/22 12:19:39, 2] utils/net.c:main(685)
return code = 0
Fetching DOMAIN database
Fetching BUILTIN database
