Hi! After more work on the oplock_break problem, I've found the following
in my tcpdump-smb logging. It seems that when ost5 (pid=26339 in the logs
that follow) requests access to the oplocked file comm.inf from ost6
(pid=5872) the oplock_break failes (this is NOT isolated to any one or two
systems on our network, just using these two as an example, and the server
reports no dropped packets using ifconfig.) I tcpdumped these two
computers during the transaction and have found that the server sends an
SMBlockingX command to ost6, and ost6 responds with a packet that isn't as
long as the "normal" SMB ones that I see in the hex dumps everywhere
else.
Matter of fact the usual 5th line of HEX text, if I'm not mistaken, begins
with the command number, and it is missing here. What follows are the
tcp-dumps for ost5 and ost6 followed by the very long samba-log for the
time periods in question. I do have tcpdumps for 3 other instances if we
need them. Anybody have ANY ideas? I aplogize for the lengthy email, but
I wanted to make sure the the proper information is out there and didn't
want to miss anything! I stripped out some of the hex dump information to
make it fit under the 40k limit for samba@samba.org. Hope I didn't delete
any pertinant information!
Thanks!
Bruce
ost5 tcpdump:
18:09:41.378977 arp who-has gate.irstc.cc.al.us tell ost5.irstc.cc.al.us
18:09:41.378977 arp reply gate.irstc.cc.al.us is-at 0:60:8:95:8e:70
18:09:41.378977 ost5.irstc.cc.al.us.1047 >
gate.irstc.cc.al.us.netbios-ssn: P 565:656(91) ack 555 win 82
06>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=87
SMB PACKET: SMBtrans2 (REQUEST)
SMB Command = 0x32
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x1
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35073
Word Count = 15
TRANSACT2_FINDFIRST param_length=21 data_length=0
TotParam=21
TotData=0
MaxParam=10
MaxData=2432
MaxSetup=0
Flags=0x0
TimeOut=0
Res1=0x0
ParamCnt=21
ParamOff=66
DataCnt=0
DataOff=0
SetupCnt=1
TransactionName=SMB2
Attribute=HIDDEN SYSTEM DIR
SearchCount=6
Flags=0x0
Level=260
File=TMP.~NF
18:09:41.388972 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: P 555:594(39) ack 656 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=35
SMB PACKET: SMBtrans2 (REPLY)
SMB Command = 0x32
Error class = 0x1
Error code = 2
Flags1 = 0x80
Flags2 = 0x41
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35073
Word Count = 0
SMBError = ERRDOS - ERRbadfile (File not found.)
TRANSACT2_FINDFIRST param_length=2432 data_length=0
Trans2Interim
18:09:41.388972 ost5.irstc.cc.al.us.1047 >
gate.irstc.cc.al.us.netbios-ssn: P 656:706(50) ack 594 win 81
67>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=46
SMB PACKET: SMBgetatr (REQUEST)
SMB Command = 0x8
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35201
Word Count = 0
smbbuf[]Path=\COMM.INF
18:09:41.398967 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: P 594:653(59) ack 706 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=55
SMB PACKET: SMBgetatr (REPLY)
SMB Command = 0x8
Error class = 0x0
Error code = 0
Flags1 = 0x80
Flags2 = 0x1
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35201
Word Count = 10
smbvwv[]Attribute=ARCHIVE
Time=Fri Mar 2 06:53:02 2007
Size=153
Res=(0x0,0x0,0x0,0x0,0x0)
smb_bcc=0
18:09:41.398967 ost5.irstc.cc.al.us.1047 >
gate.irstc.cc.al.us.netbios-ssn: P 706:785(79) ack 653 win 81
08>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=75
SMB PACKET: SMBopenX (REQUEST)
SMB Command = 0x2D
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35329
Word Count = 15
smbvwv[]Com2=0xFF
Off2=0
Flags=0x7
Mode=0xC0
SearchAttrib=HIDDEN SYSTEM DIR
AttribTime=Wed Dec 31 17:59:59 1969
OFun=0x1
Size=0
TimeOut=0
Res=0x0
smbbuf[]Path=\COMM.INF
(DF)
4500 0077 0318 4000 2006 d293 c0a8 0284
c0a8 0101 0417 008b 1059 65a3 d45d ee3d
5018 1fac 9a5a 0000 0000 004b ff53 4d42
2d00 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 8518 6400 018a 0fff 0000
0007 00c0 0016 0000 00d0 78a3 3601 0000
0000 0000 0000 0000 0000 000a 005c 434f
4d4d 2e49 4e46 00
18:09:41.418957 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: . ack 785 win 32736 (DF)
4500 0028 d561 4000 4006 e098 c0a8 0101
c0a8 0284 008b 0417 d45d ee3d 1059 65f2
5010 7fe0 6d95 0000
18:10:27.732475 ost5.irstc.cc.al.us.1047 >
gate.irstc.cc.al.us.netbios-ssn: F 785:785(0) ack 653 win 810
8 (DF)
4500 0028 0418 4000 2006 d1e2 c0a8 0284
c0a8 0101 0417 008b 1059 65f2 d45d ee3d
5011 1fac cdc8 0000 0000 0000 0000
18:10:27.732475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: . ack 786 win 32735 (DF)
4500 0028 d56e 4000 4006 e08b c0a8 0101
c0a8 0284 008b 0417 d45d ee3d 1059 65f3
5010 7fdf 6d95 0000
<snipping out some extraneous information. Leaving the headers. If you need
the info, let me know>
18:10:27.732475 ost5.irstc.cc.al.us.netbios-ns >
192.168.255.255.netbios-ns:>>> NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
18:10:27.732475 gate.irstc.cc.al.us.netbios-ns >
ost5.irstc.cc.al.us.netbios-ns:>>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
18:10:27.732475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: S 280095016:280095016(0) win
8192 <mss 1460> (DF)
18:10:27.732475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: S 2731986599:2731986599(0) a
ck 280095017 win 32736 <mss 1460>
18:10:27.732475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: . ack 1 win 8760 (DF)
18:10:27.732475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 1:73(72) ack 1 win
8760>>> NBT Packet
NBT Session Request
18:10:27.752475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: . ack 73 win 32664 (DF)
18:10:27.842475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 1:5(4) ack 73 win 32736>>> NBT Packet
NBT Session Granted
18:10:27.842475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 73:231(158) ack 5 win
8756>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=154
SMB PACKET: SMBnegprot (REQUEST)
18:10:27.852475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 5:91(86) ack 231 win 32736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=82
SMB PACKET: SMBnegprot (REPLY)
18:10:27.862475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 231:386(155) ack 91 win 86
70>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=151
SMB PACKET: SMBsesssetupX (REQUEST)
SMB PACKET: SMBtconX (REQUEST) (CHAINED)
18:10:27.882475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: . ack 386 win 32736 (DF)
18:10:27.962475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 91:175(84) ack 386 win 327
36>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=80
SMB PACKET: SMBsesssetupX (REPLY)
SMB PACKET: SMBtconX (REPLY) (CHAINED)
18:10:27.962475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 386:465(79) ack 175 win 85
86>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=75
SMB PACKET: SMBopenX (REQUEST)
SMB Command = 0x2D
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35585
Word Count = 15
smbvwv[]Com2=0xFF
Off2=0
Flags=0x7
Mode=0xC0
SearchAttrib=HIDDEN SYSTEM DIR
AttribTime=Wed Dec 31 17:59:59 1969
OFun=0x1
Size=0
TimeOut=0
Res=0x0
smbbuf[]Path=\COMM.INF
(DF)
4500 0077 0b18 4000 2006 ca93 c0a8 0284
c0a8 0101 0418 008b 10b1 eaaa a2d6 cf56
5018 218a 6389 0000 0000 004b ff53 4d42
2d00 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 8518 6400 018b 0fff 0000
0007 00c0 0016 0000 00d0 78a3 3601 0000
0000 0000 0000 0000 0000 000a 005c 434f
4d4d 2e49 4e46 00
18:10:27.982475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: . ack 465 win 32657 (DF)
4500 0028 d57d 4000 4006 e07c c0a8 0101
c0a8 0284 008b 0418 a2d6 cf56 10b1 eaf9
5010 7f91 38f2 0000
18:10:27.982475 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 175:244(69) ack 465 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=65
SMB PACKET: SMBopenX (REPLY)
SMB Command = 0x2D
Error class = 0x0
Error code = 0
Flags1 = 0x80
Flags2 = 0x1
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35585
Word Count = 15
smbvwv[]Com2=0xFF
Off2=0
Handle=4316
Attrib=ARCHIVE
Time=Fri Mar 2 06:53:02 2007
Size=153
Access=0x0
Type=0x0
State=0x0
Action=0x8001
FileID=0x0
Res=0x0
smb_bcc=0
(DF)
4500 006d d57e 4000 4006 e036 c0a8 0101
c0a8 0284 008b 0418 a2d6 cf56 10b1 eaf9
5018 7fe0 c343 0000 0000 0041 ff53 4d42
2d00 0000 0080 0100 0000 0000 0000 0000
0000 0000 0100 8518 6400 018b 0fff 0000
00dc 1020 00e2 359f 3699 0000 0000 0000
0000 0001 8000 0000 0000 0000 00
18:10:27.982475 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 465:520(55) ack 244 win 85
17>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBreadbraw (REQUEST)
18:10:28.012470 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: . ack 520 win 32736 (DF)
18:10:28.032460 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 244:401(157) ack 520 win 3
2736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=153
Session packet:(raw data?)
18:10:28.232360 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 244:401(157) ack 520 win 3
2736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=153
Session packet:(raw data?)
18:10:28.232360 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: . ack 401 win 8360 (DF)
4500 0028 0d18 4000 2006 c8e2 c0a8 0284
c0a8 0101 0418 008b 10b1 eb30 a2d6 d038
5010 20a8 96c2 0000 0000 0000 0000
18:10:28.232360 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: . ack 401 win 8360 (DF)
4500 0028 0e18 4000 2006 c7e2 c0a8 0284
c0a8 0101 0418 008b 10b1 eb30 a2d6 d038
5010 20a8 96c2 0000 0000 0000 0000
18:10:45.406430 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 401:456(55) ack 520 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBlockingX (REQUEST)
SMB Command = 0x24
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 65535
UID = 0
MID = 65535
Word Count = 8
smbvwv[]Com2=0xFF
Off2=0
Handle=4316
LockType=0x2
TimeOut=0
UnlockCount=0
LockCount=0
smbbuf[]Process
(DF)
4500 005f d583 4000 4006 e03f c0a8 0101
c0a8 0284 008b 0418 a2d6 d038 10b1 eb30
5018 7fe0 aba4 0000 0000 0033 ff53 4d42
2400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 ffff 0000 ffff 08ff 0000
00dc 1002 0000 0000 0000 0000 0000 00
18:10:45.406430 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: P 520:565(45) ack 456 win 83
05>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=41
SMB PACKET: SMBclose (REQUEST)
SMB Command = 0x4
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35841
Word Count = 3
smbvwv[]Handle=4316
Time=NULL
smb_bcc=0
(DF)
4500 0055 0f18 4000 2006 c6b5 c0a8 0284
c0a8 0101 0418 008b 10b1 eb30 a2d6 d06f
5018 2071 464d 0000 0000 0029 ff53 4d42
0400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 8518 6400 018c 03dc 10ff
ffff ff00 00
18:10:45.426420 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: . ack 565 win 32691 (DF)
4500 0028 d584 4000 4006 e075 c0a8 0101
c0a8 0284 008b 0418 a2d6 d06f 10b1 eb5d
5010 7fb3 3753 0000
18:10:45.426420 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1048: P 456:495(39) ack 565 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=35
SMB PACKET: SMBclose (REPLY)
SMB Command = 0x4
Error class = 0x0
Error code = 0
Flags1 = 0x80
Flags2 = 0x1
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35841
Word Count = 0
smb_bcc=0
(DF)
4500 004f d585 4000 4006 e04d c0a8 0101
c0a8 0284 008b 0418 a2d6 d06f 10b1 eb5d
5018 7fe0 f918 0000 0000 0023 ff53 4d42
0400 0000 0080 0100 0000 0000 0000 0000
0000 0000 0100 8518 6400 018c 0000 00
18:10:45.436415 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: P 653:722(69) ack 786 win 32
735>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=65
SMB PACKET: SMBopenX (REPLY)
SMB Command = 0x2D
Error class = 0x0
Error code = 0
Flags1 = 0x80
Flags2 = 0x1
Tree ID = 1
Proc ID = 6277
UID = 100
MID = 35329
Word Count = 15
smbvwv[]Com2=0xFF
Off2=0
Handle=4193
Attrib=ARCHIVE
Time=Fri Mar 2 06:53:02 2007
Size=153
Access=0x0
Type=0x0
State=0x0
Action=0x8001
FileID=0x0
Res=0x0
smb_bcc=0
(DF)
4500 006d d587 4000 4006 e02d c0a8 0101
c0a8 0284 008b 0417 d45d ee3d 1059 65f3
5018 7fdf f8b1 0000 0000 0041 ff53 4d42
2d00 0000 0080 0100 0000 0000 0000 0000
0000 0000 0100 8518 6400 018a 0fff 0000
0061 1020 00e2 359f 3699 0000 0000 0000
0000 0001 8000 0000 0000 0000 00
18:10:45.436415 gate.irstc.cc.al.us.netbios-ssn >
ost5.irstc.cc.al.us.1047: F 722:722(0) ack 786 win 327
36
4500 0028 d588 0000 4006 2072 c0a8 0101
c0a8 0284 008b 0417 d45d ee82 1059 65f3
5011 7fe0 6d4e 0000
18:10:45.436415 ost5.irstc.cc.al.us.1047 >
gate.irstc.cc.al.us.netbios-ssn: . ack 723 win 8039 (DF)
4500 0028 1018 4000 2006 c5e2 c0a8 0284
c0a8 0101 0417 008b 1059 65f3 d45d ee83
5010 1f67 cdc7 0000 0000 0000 0000
18:10:45.586340 ost5.irstc.cc.al.us.1048 >
gate.irstc.cc.al.us.netbios-ssn: . ack 495 win 8266 (DF)
4500 0028 1118 4000 2006 c4e2 c0a8 0284
c0a8 0101 0418 008b 10b1 eb5d a2d6 d096
5010 204a 9695 0000 0000 0000 0000
ost6 tcpdump:
18:09:41.408962 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: P 342:397(55) ack 606 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBlockingX (REQUEST)
SMB Command = 0x24
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 65535
UID = 0
MID = 65535
Word Count = 8
smbvwv[]Com2=0xFF
Off2=0
Handle=4140
LockType=0x2
TimeOut=0
UnlockCount=0
LockCount=0
smbbuf[]Process
(DF)
4500 005f d560 4000 4006 e061 c0a8 0101
c0a8 0285 008b 04da 7222 3a50 1ba3 ff61
5018 7fe0 530b 0000 0000 0033 ff53 4d42
2400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 ffff 0000 ffff 08ff 0000
002c 1002 0000 0000 0000 0000 0000 00
18:09:41.548892 arp who-has gate.irstc.cc.al.us tell ost6.irstc.cc.al.us
0001 0800 0604 0001 0020 351f f7a5 c0a8
0285 0000 0000 0000 c0a8 0101 0000 0000
0000 0000 0000 0000 0000 0000 0000
18:09:41.548892 arp reply gate.irstc.cc.al.us is-at 0:60:8:95:8e:70
0001 0800 0604 0002 0060 0895 8e70 c0a8
0101 0020 351f f7a5 c0a8 0285
18:09:41.548892 ost6.irstc.cc.al.us.1242 >
gate.irstc.cc.al.us.netbios-ssn: . ack 397 win 8364 (DF)
4500 0028 f077 4000 2006 e581 c0a8 0285
c0a8 0101 04da 008b 1ba3 ff61 7222 3a87
5010 20ac 3d3e 0000 0000 0000 0000
18:09:51.415381 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: P 397:452(55) ack 606 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBlockingX (REQUEST)
SMB Command = 0x24
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 65535
UID = 0
MID = 65535
Word Count = 8
smbvwv[]Com2=0xFF
Off2=0
Handle=4140
LockType=0x2
TimeOut=0
UnlockCount=0
LockCount=0
smbbuf[]Process
(DF)
4500 005f d562 4000 4006 e05f c0a8 0101
c0a8 0285 008b 04da 7222 3a87 1ba3 ff61
5018 7fe0 52d4 0000 0000 0033 ff53 4d42
2400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 ffff 0000 ffff 08ff 0000
002c 1002 0000 0000 0000 0000 0000 00
18:09:51.545316 ost6.irstc.cc.al.us.1242 >
gate.irstc.cc.al.us.netbios-ssn: . ack 452 win 8309 (DF)
4500 0028 f177 4000 2006 e481 c0a8 0285
c0a8 0101 04da 008b 1ba3 ff61 7222 3abe
5010 2075 3d3e 0000 0000 0000 0000
18:10:01.421803 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: P 452:507(55) ack 606 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBlockingX (REQUEST)
SMB Command = 0x24
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 65535
UID = 0
MID = 65535
Word Count = 8
smbvwv[]Com2=0xFF
Off2=0
Handle=4140
LockType=0x2
TimeOut=0
UnlockCount=0
LockCount=0
smbbuf[]Process
(DF)
4500 005f d563 4000 4006 e05e c0a8 0101
c0a8 0285 008b 04da 7222 3abe 1ba3 ff61
5018 7fe0 529d 0000 0000 0033 ff53 4d42
2400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 ffff 0000 ffff 08ff 0000
002c 1002 0000 0000 0000 0000 0000 00
18:10:01.541743 ost6.irstc.cc.al.us.1242 >
gate.irstc.cc.al.us.netbios-ssn: . ack 507 win 8254 (DF)
4500 0028 f277 4000 2006 e381 c0a8 0285
c0a8 0101 04da 008b 1ba3 ff61 7222 3af5
5010 203e 3d3e 0000 0000 0000 0000
18:10:11.428226 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: P 507:562(55) ack 606 win 32
736>>> NBT Packet
NBT Session Packet
Flags=0x0
Length=51
SMB PACKET: SMBlockingX (REQUEST)
SMB Command = 0x24
Error class = 0x0
Error code = 0
Flags1 = 0x0
Flags2 = 0x0
Tree ID = 1
Proc ID = 65535
UID = 0
MID = 65535
Word Count = 8
smbvwv[]Com2=0xFF
Off2=0
Handle=4140
LockType=0x2
TimeOut=0
UnlockCount=0
LockCount=0
smbbuf[]Process
(DF)
4500 005f d569 4000 4006 e058 c0a8 0101
c0a8 0285 008b 04da 7222 3af5 1ba3 ff61
5018 7fe0 5266 0000 0000 0033 ff53 4d42
2400 0000 0000 0000 0000 0000 0000 0000
0000 0000 0100 ffff 0000 ffff 08ff 0000
002c 1002 0000 0000 0000 0000 0000 00
18:10:11.538171 ost6.irstc.cc.al.us.1242 >
gate.irstc.cc.al.us.netbios-ssn: . ack 562 win 8199 (DF)
4500 0028 f377 4000 2006 e281 c0a8 0285
c0a8 0101 04da 008b 1ba3 ff61 7222 3b2c
5010 2007 3d3e 0000 0000 0000 0000
18:10:21.434664 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: F 562:562(0) ack 606 win 327
36
4500 0028 d56c 0000 4006 208d c0a8 0101
c0a8 0285 008b 04da 7222 3b2c 1ba3 ff61
5011 7fe0 dd63 0000
18:10:21.434664 ost6.irstc.cc.al.us.1242 >
gate.irstc.cc.al.us.netbios-ssn: F 606:606(0) ack 563 win 819
9 (DF)
4500 0028 f477 4000 2006 e181 c0a8 0285
c0a8 0101 04da 008b 1ba3 ff61 7222 3b2d
5011 2007 3d3c 0000 0000 0000 0000
18:10:21.434664 gate.irstc.cc.al.us.netbios-ssn >
ost6.irstc.cc.al.us.1242: . ack 607 win 32735 (DF)
4500 0028 d56d 4000 4006 e08b c0a8 0101
c0a8 0285 008b 04da 7222 3b2d 1ba3 ff62
5010 7fdf dd63 0000
samba-log (log level=100):
Jan 18 18:06:13 gate smbd[5872]: [1999/01/18 18:06:13, 2]
smbd/server.c:main(702)
Jan 18 18:06:13 gate smbd[5872]: Changed root to /
Jan 18 18:06:13 gate smbd[5872]: [1999/01/18 18:06:13, 2]
lib/access.c:check_access(249)
Jan 18 18:06:13 gate smbd[5872]: Allowed connection from
ost6.irstc.cc.al.us (192.168.2.133)
Jan 18 18:06:13 gate smbd[5872]: [1999/01/18 18:06:13, 2]
smbd/reply.c:reply_special(95)
Jan 18 18:06:13 gate smbd[5872]: netbios connect: name1=GATE
name2=OST6
Jan 18 18:06:13 gate smbd[5872]: [1999/01/18 18:06:13, 2]
lib/access.c:check_access(249)
Jan 18 18:06:13 gate smbd[5872]: Allowed connection from
ost6.irstc.cc.al.us (192.168.2.133)
Jan 18 18:06:13 gate smbd[5872]: [1999/01/18 18:06:13, 1]
smbd/service.c:make_connection(488)
Jan 18 18:06:13 gate smbd[5872]: ost6 (192.168.2.133) connect to service
virus as user lhgeorge (uid=7
45, gid=100) (pid 5872)
Jan 18 18:06:14 gate smbd[5872]: [1999/01/18 18:06:14, 2]
smbd/open.c:open_file(569)
Jan 18 18:06:14 gate smbd[5872]: lhgeorge opened file comm.inf read=Yes
write=No (numopen=1)
[1999/01/18 18:07:14, 3] param/params.c:pm_process(538)
params.c:pm_process() - Processing configuration file
"/etc/smb.conf"
doing parameter workgroup = REID
doing parameter server string = Samba Server
doing parameter interfaces = 192.168.1.1/16 127.0.0.1 207.157.90.2/32
doing parameter encrypt passwords = Yes
doing parameter map to guest = Bad Password
doing parameter passwd program = /usr/sbin/passwd.samba %u
doing parameter passwd chat = *New*Password* %n\n *Confirm*Password*
%n\n *Password*has*been*changed.
*
doing parameter unix password sync = Yes
doing parameter log level = 100
doing parameter syslog = 3
doing parameter syslog only = Yes
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 0]
smbd/process.c:timeout_processing(795)
Jan 18 18:07:14 gate smbd[5872]: Reloading services after SIGHUP
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[homes]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Home
Directories
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/%u/config
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter create mask = 0750
Jan 18 18:07:14 gate smbd[5872]: doing parameter browseable = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter oplocks = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[netlogon]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Network Logon
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/netlogon
Jan 18 18:07:14 gate smbd[5872]: doing parameter admin users = btenison
brucet goober tenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter write list = btenison
brucet goober tenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter browseable = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter root preexec
/usr/local/sbin/setipfw %u %I %m
Jan 18 18:07:14 gate smbd[5872]: doing parameter root postexec
/usr/local/sbin/resetipfw %u %I
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[printers]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = All Printers
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /var/spool/samba
Jan 18 18:07:14 gate smbd[5872]: doing parameter print ok = Yes
Jan 18 18:07:14 gate smbd[5872]: doing parameter browseable = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[btsdir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Btenison's
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/btenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = btenison
tenison goober
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[ahooks]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Ahooks'
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/ahooks
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = ahooks
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[wrobbins]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Wrobbins'
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/wrobbins
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = wrobbins
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter force create mode 0744
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[mjdir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Mjenkins'
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/mjenkins
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = mjenkins
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[eldir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = elong's
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/elong
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = elong
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[jstokes]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Jstokes'
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/jstokes
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = jstokes
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[jddir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Jdale's
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/jdale
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = jdale
btenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter admin users = btenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[drdir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter comment = Drowser's
Service
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/drowser
Jan 18 18:07:14 gate smbd[5872]: doing parameter valid users = drowser
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[public]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/samba
Jan 18 18:07:14 gate smbd[5872]: doing parameter admin users = btenison
goober
Jan 18 18:07:14 gate smbd[5872]: doing parameter write list = btenison
goober
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter guest ok = Yes
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[compdir]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/compdir
Jan 18 18:07:14 gate smbd[5872]: doing parameter write list = @users
btenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter force group = users
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter force create mode 0664
Jan 18 18:07:14 gate smbd[5872]: doing parameter guest ok = Yes
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[virus]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/virus
Jan 18 18:07:14 gate smbd[5872]: doing parameter write list = @users
Jan 18 18:07:14 gate smbd[5872]: doing parameter force group = users
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter force create mode 0664
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 2]
param/loadparm.c:do_section(2182)
Jan 18 18:07:14 gate smbd[5872]: Processing section "[wp]"
Jan 18 18:07:14 gate smbd[5872]: doing parameter path = /home/wordperf
Jan 18 18:07:14 gate smbd[5872]: doing parameter admin users = btenison
Jan 18 18:07:14 gate smbd[5872]: doing parameter write list = @users
Jan 18 18:07:14 gate smbd[5872]: doing parameter read only = No
Jan 18 18:07:14 gate smbd[5872]: doing parameter guest ok = Yes
Jan 18 18:07:14 gate smbd[5872]: doing parameter oplocks = No
Jan 18 18:07:14 gate smbd[5872]: [1999/01/18 18:07:14, 0]
smbd/filename.c:print_stat_cache_statistics(10
3)
Jan 18 18:07:14 gate smbd[5872]: stat cache stats: lookups = 3, hits 1, misses
= 2, stat cache was 3
3.333333% effective.
Jan 18 18:09:51 gate smbd[5872]: [1999/01/18 18:09:51, 2]
smbd/oplock.c:oplock_break(725)
Jan 18 18:09:51 gate smbd[5872]: oplock_break resend
Jan 18 18:10:01 gate smbd[5872]: [1999/01/18 18:10:01, 2]
smbd/oplock.c:oplock_break(725)
Jan 18 18:10:01 gate smbd[5872]: oplock_break resend
Jan 18 18:10:11 gate smbd[5872]: [1999/01/18 18:10:11, 2]
smbd/oplock.c:oplock_break(725)
Jan 18 18:10:11 gate smbd[5872]: oplock_break resend
Jan 18 18:10:13 gate smbd[26339]: [1999/01/18 18:10:13, 0]
smbd/oplock.c:request_oplock_break(943)
Jan 18 18:10:13 gate smbd[26339]: request_oplock_break: no response
received to oplock break request t
o pid 5872 on port 1064 for dev = 301, inode = 620605
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 0]
smbd/oplock.c:oplock_break(742)
Jan 18 18:10:21 gate smbd[5872]: oplock_break: receive_smb timed out
after 30 seconds.
Jan 18 18:10:21 gate smbd[5872]: oplock_break failed for file comm.inf
(dev = 301, inode = 620605).
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 0]
smbd/oplock.c:oplock_break(812)
Jan 18 18:10:21 gate smbd[5872]: oplock_break: client failure in break -
shutting down this smbd.
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 2]
smbd/server.c:exit_server(406)
Jan 18 18:10:21 gate smbd[5872]: Closing connections
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 1]
smbd/service.c:close_cnum(514)
Jan 18 18:10:21 gate smbd[5872]: ost6 (0.0.0.0) closed connection to
service virus
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 2]
locking/locking_shm.c:shm_del_share_mode(354)
Jan 18 18:10:21 gate smbd[5872]: del_share_modes Deleting share mode
entry dev=301 ino=620605
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 2]
locking/locking_shm.c:shm_del_share_mode(375)
Jan 18 18:10:21 gate smbd[5872]: del_share_modes num entries = 0,
deleting share_mode dev=301 ino=6206
05
Jan 18 18:10:21 gate smbd[5872]: [1999/01/18 18:10:21, 2]
smbd/close.c:close_file(165)
Jan 18 18:10:21 gate smbd[5872]: lhgeorge closed file comm.inf
(numopen=0)
<snipped out the doing parameter section (duplicated above)>
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 2]
smbd/server.c:main(702)
Jan 18 18:10:27 gate smbd[7925]: Changed root to /
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 2]
lib/access.c:check_access(249)
Jan 18 18:10:27 gate smbd[7925]: Allowed connection from
ost5.irstc.cc.al.us (192.168.2.132)
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 2]
smbd/reply.c:reply_special(95)
Jan 18 18:10:27 gate smbd[7925]: netbios connect: name1=GATE
name2=OST5
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 2]
lib/access.c:check_access(249)
Jan 18 18:10:27 gate smbd[7925]: Allowed connection from
ost5.irstc.cc.al.us (192.168.2.132)
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 1]
smbd/service.c:make_connection(488)
Jan 18 18:10:27 gate smbd[7925]: ost5 (192.168.2.132) connect to service
virus as user lhgeorge (uid=7
45, gid=100) (pid 7925)
Jan 18 18:10:27 gate smbd[7925]: [1999/01/18 18:10:27, 2]
smbd/open.c:open_file(569)
Jan 18 18:10:27 gate smbd[7925]: lhgeorge opened file comm.inf read=Yes
write=No (numopen=1)
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 0]
smbd/oplock.c:request_oplock_break(943)
Jan 18 18:10:45 gate smbd[26339]: request_oplock_break: no response
received to oplock break request t
o pid 5872 on port 1064 for dev = 301, inode = 620605
Jan 18 18:10:45 gate smbd[7925]: [1999/01/18 18:10:45, 2]
locking/locking_shm.c:shm_del_share_mode(354)
Jan 18 18:10:45 gate smbd[7925]: del_share_modes Deleting share mode
entry dev=301 ino=620605
Jan 18 18:10:45 gate smbd[7925]: [1999/01/18 18:10:45, 2]
locking/locking_shm.c:shm_del_share_mode(375)
Jan 18 18:10:45 gate smbd[7925]: del_share_modes num entries = 0,
deleting share_mode dev=301 ino=6206
05
Jan 18 18:10:45 gate smbd[7925]: [1999/01/18 18:10:45, 2]
smbd/close.c:close_file(165)
Jan 18 18:10:45 gate smbd[7925]: lhgeorge closed file comm.inf
(numopen=0)
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 2]
smbd/open.c:open_file(569)
Jan 18 18:10:45 gate smbd[26339]: lhgeorge opened file comm.inf read=Yes
write=No (numopen=1)
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 2]
smbd/server.c:exit_server(406)
Jan 18 18:10:45 gate smbd[26339]: Closing connections
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 1]
smbd/service.c:close_cnum(514)
Jan 18 18:10:45 gate smbd[26339]: ost5 (0.0.0.0) closed connection to
service virus
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 2]
locking/locking_shm.c:shm_del_share_mode(354)
Jan 18 18:10:45 gate smbd[26339]: del_share_modes Deleting share mode
entry dev=301 ino=620605
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 2]
locking/locking_shm.c:shm_del_share_mode(375)
Jan 18 18:10:45 gate smbd[26339]: del_share_modes num entries = 0,
deleting share_mode dev=301 ino=620
605
Jan 18 18:10:45 gate smbd[26339]: [1999/01/18 18:10:45, 2]
smbd/close.c:close_file(165)
Jan 18 18:10:45 gate smbd[26339]: lhgeorge closed file comm.inf
(numopen=0)