Hello list! On all my samba installations (3.0.20b) I can delete all unused printer drivers with rpcclient regardless which user name or password i use. Is this a general feature or might it depend on my settings? Thanks, Martin -- Martin Zielinski mz@seh.de Software Development SEH Computertechnik GmbH www.seh.de
Gerald (Jerry) Carter
2006-Feb-01 14:12 UTC
[Samba] No access check deleting printer drivers
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Martin Zielinski wrote:> Hello list! > > On all my samba installations (3.0.20b) I can delete all > unused printer drivers with rpcclient regardless which user > name or password i use. > > Is this a general feature or might it depend on my settings?Martin, Please send me a level 10 debug log as evidence? I'm a little skeptical about this (no offense). cheers, jerry ====================================================================I live in a Reply-to-All world ----------------------- Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFD4MHFIR7qMdg1EfYRAsuIAJ4jHYarlpFPdgGLzC3N2dyMuQXQDACgqw4Z 6mL4UG33LxTLBxoA14CyCGA=o9kc -----END PGP SIGNATURE-----
Hi. I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. The difference is that I use a windows 2000 client; login as user to the samba domain (no administrative privileges). Then I go to \\server , printers, server properties, and I can delete any unused printer driver. However, I cannot add any printer driver (as a normal user). Also, I cannot create/delete/modify any file in \\server\print$. When I connect as administrator, I can delete/add, etc.. printer drivers as usual. That user is in domain users, and hasn't any privilege (like SePrintOperatorPrivilege). My smb.conf is the following: [global] preferred master = yes domain master = yes local master = yes domain logons = yes add machine script = /etc/groupware/scripts/create_machine.sh %u os level=33 logon path = \\%L\Profiles\%U logon home= \\%L\Profiles\%U logon drive = j: enable privileges = yes logon script = startup.bat security = user workgroup = JLPDOM netbios name = jlp printing = cups printcap name = cups map to guest = Bad User passdb backend = ldapsam:ldap://127.0.0.1 ldap admin dn = "cn=manager,dc=jlp,dc=es" ldap ssl = on ldap delete dn = no ldap user suffix = ou=People ldap group suffix = ou=Groups ldap machine suffix = ou=Computers ldap suffix = dc=jlp,dc=es log file = /var/log/samba/log.%m max log size = 50 server string = Samba Server at jlp.jlp.es encrypt passwords = yes ldap replication sleep = 10000 log level=10 [users] comment = All users path = /var/homes writeable = Yes veto files = /aquota.user/groups/shares/ browseable = yes guest ok = no printable = no vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [homes] comment = Home directory writeable=yes vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [printers] read only=yes browseable = yes guest ok = no printable = yes admin users = @Administrators comment = All Printers path = /tmp [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = admin.jlp.es admin users = admin.jlp.es read only=yes create mask = 0664 directory mask = 0775 browseable = yes guest ok = no printable = no [netlogon] path = /var/lib/samba/netlogon read only = yes write list = @Administrators admin users = @Administrators vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [profiles] path = /var/lib/samba/profiles read only = no preexec=/etc/groupware/scripts/check_quota_user.sh %m %I vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [viruses] path = /var/lib/samba/viruses admin users = @Administrators valid users = @Administrators write list = @Administrators -------- Even using "read only=yes"or "writeable=no" in [print$] I can delete printer drivers. Normally, I use "write list = admin.jlp.es" and "admin users = admin.jlp.es" (admin.jlp.es is the domain administrator user) . If I delete the last two lines, I can also delete drivers. Permissions in /var/lib/samba/drivers are 755, with owner root:root. I also send you the samba log, with log level 10. It's very big, I don't know if it would very useful to you... Thanks Cesar Hernandez chernandez@genos.es Genos Open Source S.L. Tarragona, 100. 08015 Barcelona Tel. 932 282 231 http://genos.es http://www.genos.org
Hi. I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. The difference is that I use a windows 2000 client; login as user to the samba domain (no administrative privileges). Then I go to \\server , printers, server properties, and I can delete any unused printer driver. However, I cannot add any printer driver (as a normal user). Also, I cannot create/delete/modify any file in \\server\print$. When I connect as administrator, I can delete/add, etc.. printer drivers as usual. That user is in domain users, and hasn't any privilege (like SePrintOperatorPrivilege). My smb.conf is the following: [global] preferred master = yes domain master = yes local master = yes domain logons = yes add machine script = /etc/groupware/scripts/create_machine.sh %u os level=33 logon path = \\%L\Profiles\%U logon home= \\%L\Profiles\%U logon drive = j: enable privileges = yes logon script = startup.bat security = user workgroup = JLPDOM netbios name = jlp printing = cups printcap name = cups map to guest = Bad User passdb backend = ldapsam:ldap://127.0.0.1 ldap admin dn = "cn=manager,dc=jlp,dc=es" ldap ssl = on ldap delete dn = no ldap user suffix = ou=People ldap group suffix = ou=Groups ldap machine suffix = ou=Computers ldap suffix = dc=jlp,dc=es log file = /var/log/samba/log.%m max log size = 50 server string = Samba Server at jlp.jlp.es encrypt passwords = yes ldap replication sleep = 10000 log level=10 [users] comment = All users path = /var/homes writeable = Yes veto files = /aquota.user/groups/shares/ browseable = yes guest ok = no printable = no vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [homes] comment = Home directory writeable=yes vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [printers] read only=yes browseable = yes guest ok = no printable = yes admin users = @Administrators comment = All Printers path = /tmp [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = admin.jlp.es admin users = admin.jlp.es read only=yes create mask = 0664 directory mask = 0775 browseable = yes guest ok = no printable = no [netlogon] path = /var/lib/samba/netlogon read only = yes write list = @Administrators admin users = @Administrators vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [profiles] path = /var/lib/samba/profiles read only = no preexec=/etc/groupware/scripts/check_quota_user.sh %m %I vfs object = vscan-clamav vscan-clamav: config-file = /etc/samba/vscan-clamav.conf [viruses] path = /var/lib/samba/viruses admin users = @Administrators valid users = @Administrators write list = @Administrators -------- Even using "read only=yes"or "writeable=no" in [print$] I can delete printer drivers. Normally, I use "write list = admin.jlp.es" and "admin users = admin.jlp.es" (admin.jlp.es is the domain administrator user) . If I delete the last two lines, I can also delete drivers. Permissions in /var/lib/samba/drivers are 755, with owner root:root. I also send you the samba log, with log level 10. It's very big, I don't know if it would very useful to you... Thanks Cesar Hernandez chernandez@genos.es Genos Open Source S.L. Tarragona, 100. 08015 Barcelona Tel. 932 282 231 http://genos.es http://www.genos.org -------------- next part -------------- [2006/02/17 10:11:42, 5] smbd/service.c:make_connection(860) making a connection to 'normal' service print$ [2006/02/17 10:11:42, 5] lib/username.c:Get_Pwnam_alloc(290) Finding user jlp1.jlp.es [2006/02/17 10:11:42, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is jlp1.jlp.es [2006/02/17 10:11:42, 10] lib/util_pw.c:getpwnam_alloc(98) Got jlp1.jlp.es from pwnam_cache [2006/02/17 10:11:42, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals did find user [jlp1.jlp.es]! [2006/02/17 10:11:42, 3] smbd/service.c:make_connection_snum(488) Connect path is '/var/lib/samba/drivers' for service [print$] [2006/02/17 10:11:42, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for print$ [2006/02/17 10:11:42, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/02/17 10:11:42, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-771867849-417611457-4112218409-3124. [2006/02/17 10:11:42, 3] lib/util_seaccess.c:se_access_check(250) [2006/02/17 10:11:42, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-771867849-417611457-4112218409-3124 se_access_check: also S-1-5-21-771867849-417611457-4112218409-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-771867849-417611457-4112218409-1201 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2006/02/17 10:11:42, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2006/02/17 10:11:42, 3] smbd/vfs.c:vfs_init_default(216) Initialising default vfs hooks [2006/02/17 10:11:42, 5] smbd/connection.c:claim_connection(170) claiming print$ 0 [2006/02/17 10:11:42, 10] lib/username.c:user_in_list(570) user_in_list: checking user jlp1.jlp.es in list [2006/02/17 10:11:42, 10] lib/username.c:user_in_list(575) user_in_list: checking user |jlp1.jlp.es| against |admin.jlp.es| [2006/02/17 10:11:42, 10] smbd/uid.c:is_share_read_only_for_user(127) is_share_read_only_for_user: share print$ is read-only for unix user jlp1.jlp.es [2006/02/17 10:11:42, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(240) get_share_security: using default secdesc for print$ [2006/02/17 10:11:42, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2006/02/17 10:11:42, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-771867849-417611457-4112218409-3124. [2006/02/17 10:11:42, 3] lib/util_seaccess.c:se_access_check(250) [2006/02/17 10:11:42, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-771867849-417611457-4112218409-3124 se_access_check: also S-1-5-21-771867849-417611457-4112218409-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-771867849-417611457-4112218409-1201 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2006/02/17 10:11:42, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2006/02/17 10:11:42, 10] lib/username.c:user_in_list(570) user_in_list: checking user jlp1.jlp.es in list [2006/02/17 10:11:42, 10] lib/username.c:user_in_list(575) user_in_list: checking user |jlp1.jlp.es| against |admin.jlp.es| [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1062, 100) - sec_ctx_stack_ndx = 1 [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-771867849-417611457-4112218409-3124 contains 6 SIDs SID[ 0]: S-1-5-21-771867849-417611457-4112218409-3124 SID[ 1]: S-1-5-21-771867849-417611457-4112218409-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-771867849-417611457-4112218409-1201 SE_PRIV 0x20 0x0 0x0 0x0 [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1062 Primary group is 100 and contains 1 supplementary groups Group[ 0]: 100 [2006/02/17 10:11:42, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1062,1062) gid=(0,100) [2006/02/17 10:11:42, 1] smbd/service.c:make_connection_snum(693) jlp-r2k9j5dlaxv (192.168.0.24) connect to service print$ initially as user jlp1.jlp.es (uid=1062, gid=100) (pid 7355) [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/02/17 10:11:42, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/02/17 10:11:42, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /var/lib/samba/drivers [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (1062, 100) - sec_ctx_stack_ndx = 0 [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(1062, 100) : sec_ctx_stack_ndx = 1 [2006/02/17 10:11:42, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(113) : conn_ctx_stack_ndx = 0 [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1062, 100) - sec_ctx_stack_ndx = 1 [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_nt_user_token(438) NT user token of user S-1-5-21-771867849-417611457-4112218409-3124 contains 6 SIDs SID[ 0]: S-1-5-21-771867849-417611457-4112218409-3124 SID[ 1]: S-1-5-21-771867849-417611457-4112218409-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-771867849-417611457-4112218409-1201 SE_PRIV 0x20 0x0 0x0 0x0 [2006/02/17 10:11:42, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 1062 Primary group is 100 and contains 1 supplementary groups Group[ 0]: 100 [2006/02/17 10:11:42, 5] smbd/uid.c:change_to_user(309) change_to_user uid=(1062,1062) gid=(0,100) [2006/02/17 10:11:42, 3] lib/util.c:unix_clean_name(578) unix_clean_name [/W32X86/3/ALMD100.GPD] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALMD100.GPD" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3/ALMD100.GPD] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86] [2006/02/17 10:11:42, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (9b0070:size15) W32X86/3/ALMD100.GPD -> W32X86/3/ALMD100.GPD [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(180) conversion finished W32X86/3/ALMD100.GPD -> W32X86/3/ALMD100.GPD [2006/02/17 10:11:42, 10] printing/nt_printing.c:delete_driver_files(4814) deleting datafile [\W32X86\3\ALMD100.GPD] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALMD100.GPD" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [W32X86/3/ALMD100.GPD] -> [W32X86/3/ALMD100.GPD] [2006/02/17 10:11:42, 10] smbd/reply.c:can_delete(1862) can_delete: W32X86/3/ALMD100.GPD, dirtype = 0 [2006/02/17 10:11:42, 3] lib/util.c:unix_clean_name(578) unix_clean_name [/W32X86/3/ALPSRES.DLL] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALPSRES.DLL" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3/ALPSRES.DLL] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86] [2006/02/17 10:11:42, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (9c2730:size15) W32X86/3/ALPSRES.DLL -> W32X86/3/ALPSRES.DLL [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(180) conversion finished W32X86/3/ALPSRES.DLL -> W32X86/3/ALPSRES.DLL [2006/02/17 10:11:42, 10] printing/nt_printing.c:delete_driver_files(4839) deleting dependent file [W32X86/3/ALPSRES.DLL] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALPSRES.DLL" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [W32X86/3/ALPSRES.DLL] -> [W32X86/3/ALPSRES.DLL] [2006/02/17 10:11:42, 10] smbd/reply.c:can_delete(1862) can_delete: W32X86/3/ALPSRES.DLL, dirtype = 0 [2006/02/17 10:11:42, 3] lib/util.c:unix_clean_name(578) unix_clean_name [/W32X86/3/ALPSRES.INI] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALPSRES.INI" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3/ALPSRES.INI] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86/3] [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(215) stat_cache_lookup: lookup failed for name [W32X86] [2006/02/17 10:11:42, 5] smbd/statcache.c:stat_cache_add(140) stat_cache_add: Added entry (9b0070:size15) W32X86/3/ALPSRES.INI -> W32X86/3/ALPSRES.INI [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(180) conversion finished W32X86/3/ALPSRES.INI -> W32X86/3/ALPSRES.INI [2006/02/17 10:11:42, 10] printing/nt_printing.c:delete_driver_files(4839) deleting dependent file [W32X86/3/ALPSRES.INI] [2006/02/17 10:11:42, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "W32X86/3/ALPSRES.INI" [2006/02/17 10:11:42, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [W32X86/3/ALPSRES.INI] -> [W32X86/3/ALPSRES.INI] [2006/02/17 10:11:42, 10] smbd/reply.c:can_delete(1862) can_delete: W32X86/3/ALPSRES.INI, dirtype = 0 [2006/02/17 10:11:42, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (1062, 100) - sec_ctx_stack_ndx = 0 [2006/02/17 10:11:42, 5] printing/nt_printing.c:delete_printer_driver(4907) delete_printer_driver: driver delete successful [DRIVERS/W32X86/3/Alps MD-1000 (MS)] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_deleteprinterdriverex [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0000 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 78 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 136 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 4. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 001c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000015 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000004 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..28] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=84 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20102 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 28 (0x1C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 28 (0x1C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 15 00 00 ........ ........ [010] 00 04 00 00 00 00 00 00 00 00 00 00 00 ........ ..... [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1224 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4c8 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8512 of length 1228 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1224 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20166 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1140 (0x474) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1140 (0x474) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1157 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 74 04 00 00 16 00 00 ........ .t...... [020] 00 5C 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .\...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 0F 00 00 00 00 00 00 .p...4`. ........ [050] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [070] 00 00 00 00 00 03 00 00 00 60 60 08 00 00 04 00 ........ .``..... [080] 00 48 9A 7A 01 78 01 7A 01 6F 00 77 00 73 00 20 .H.z.x.z .o.w.s. [090] 00 32 00 30 00 30 00 30 00 00 00 70 00 68 00 61 .2.0.0.0 ...p.h.a [0A0] 00 5F 00 41 00 58 00 50 00 00 00 00 00 00 00 00 ._.A.X.P ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 4] smbd/vfs.c:vfs_ChDir(738) vfs_ChDir to /tmp [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1140 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1140 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1140 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1140 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1140, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1124 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1124 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0474 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000016 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1124 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1124, incoming data = 1124 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 0000045c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 0000000f [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 0000000f [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 ptr: 00086060 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000054 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0458 offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows NT x86] and version [0] we have:[0] drivers in environment [Windows NT x86] and version [1] we have:[0] drivers in environment [Windows NT x86] and version [2] we have:[5] drivers in environment [Windows NT x86] and version [3] driver: [HP Color LaserJet 4650 PCL 6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP Color LaserJet 4650 PCL 6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\HPC46506.XML:36 1:\\\\jlp\print$\W32X86\3\HPZSC2IG.DTD:36 2:\\\\jlp\print$\W32X86\3\HPLJ4650.CFG:36 3:\\\\jlp\print$\W32X86\3\HPC4650C.INI:36 4:\\\\jlp\print$\W32X86\3\HPZST2IG.DLL:36 5:\\\\jlp\print$\W32X86\3\HPZUI2IG.DLL:36 6:\\\\jlp\print$\W32X86\3\HPZ6R2IG.DLL:36 7:\\\\jlp\print$\W32X86\3\HPZ6M2IG.GPD:36 8:\\\\jlp\print$\W32X86\3\HPZSM2IG.GPD:36 9:\\\\jlp\print$\W32X86\3\HPZEV2IG.DLL:36 10:\\\\jlp\print$\W32X86\3\HPZHL2IG.HLP:36 11:\\\\jlp\print$\W32X86\3\HPCDMC32.DLL:36 12:\\\\jlp\print$\W32X86\3\HPBCFGRE.DLL:36 13:\\\\jlp\print$\W32X86\3\HPNRA.EXE:33 14:\\\\jlp\print$\W32X86\3\HPBNRAC2.DLL:36 15:\\\\jlp\print$\W32X86\3\HPBMINI.DLL:35 16:\\\\jlp\print$\W32X86\3\HPCEAC05.HPI:36 17:\\\\jlp\print$\W32X86\3\HPBMIAPI.DLL:36 18:\\\\jlp\print$\W32X86\3\HPBOID.EXE:34 19:\\\\jlp\print$\W32X86\3\HPBOIDPS.DLL:36 20:\\\\jlp\print$\W32X86\3\HPBPRO.EXE:34 21:\\\\jlp\print$\W32X86\3\HPBPROPS.DLL:36 22:\\\\jlp\print$\W32X86\3\HPPAPTS0.DLL:36 23:\\\\jlp\print$\W32X86\3\HPPASNM0.DLL:36 24:\\\\jlp\print$\W32X86\3\HPPAPML0.DLL:36 25:\\\\jlp\print$\W32X86\3\HPZIPM12.EXE:36 26:\\\\jlp\print$\W32X86\3\HPZIPT12.DLL:36 27:\\\\jlp\print$\W32X86\3\HPZINW12.EXE:36 28:\\\\jlp\print$\W32X86\3\HPZIPR12.DLL:36 29:\\\\jlp\print$\W32X86\3\HPZISN12.DLL:36 30:\\\\jlp\print$\W32X86\3\HPJCMN2U.DLL:36 31:\\\\jlp\print$\W32X86\3\HPJIPX1U.DLL:36 32:\\\\jlp\print$\W32X86\3\HPZIDR12.DLL:36 33:\\\\jlp\print$\W32X86\3\HPBMMON.DLL:35 34:\\\\jlp\print$\W32X86\3\HPDOMON.DLL:35 35:\\\\jlp\print$\W32X86\3\HPBHEALR.DLL:36 36:\\\\jlp\print$\W32X86\3\PCLXL.DLL:33 37:\\\\jlp\print$\W32X86\3\PJL.GPD:31 38:\\\\jlp\print$\W32X86\3\P6DISP.GPD:34 39:\\\\jlp\print$\W32X86\3\PCLXL.GPD:33 40:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 41:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 42:\\\\jlp:7 last one:done driver: [Apollo P-1200] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/Apollo P-1200] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\HPDJRES.DLL:35 1:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 2:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 3:\\\\jlp:7 last one:done driver: [HP DesignJet 1050C by HP] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP DesignJet 1050C by HP] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\hpltui.dll:34 1:\\\\jlp\print$\W32X86\3\hpltumpd.dll:36 2:\\\\jlp\print$\W32X86\3\HPGLRTL3.HLP:36 3:\\\\jlp\print$\W32X86\3\HPGLRTL2.HPM:36 4:\\\\jlp\print$\W32X86\3\HPGLRTL4.HPM:36 5:\\\\jlp\print$\W32X86\3\HPGLRTL8.HPM:36 6:\\\\jlp\print$\W32X86\3\HPLTCAL4.DLL:36 7:\\\\jlp\print$\W32X86\3\HPLTLNK.EXE:35 8:\\\\jlp\print$\W32X86\3\HPLTCOL1.EXE:36 9:\\\\jlp\print$\W32X86\3\HPLTSAM1.SPL:36 10:\\\\jlp\print$\W32X86\3\HPLTSAM2.SPL:36 11:\\\\jlp:7 last one:done driver: [HP Business Inkjet 2800 PCL 6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP Business Inkjet 2800 PCL 6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\hpzui043.dll:36 1:\\\\jlp\print$\W32X86\3\hpcdmc32.dll:36 2:\\\\jlp\print$\W32X86\3\hpbcfgre.dll:36 3:\\\\jlp\print$\W32X86\3\hpz6r043.dll:36 4:\\\\jlp\print$\W32X86\3\HPNRA.EXE:33 5:\\\\jlp\print$\W32X86\3\HPBNRAC2.DLL:36 6:\\\\jlp\print$\W32X86\3\HPBMINI.DLL:35 7:\\\\jlp\print$\W32X86\3\HPCEAC05.HPI:36 8:\\\\jlp\print$\W32X86\3\HPBMIAPI.DLL:36 9:\\\\jlp\print$\W32X86\3\HPBOID.EXE:34 10:\\\\jlp\print$\W32X86\3\HPBOIDPS.DLL:36 11:\\\\jlp\print$\W32X86\3\HPBPRO.EXE:34 12:\\\\jlp\print$\W32X86\3\HPBPROPS.DLL:36 13:\\\\jlp\print$\W32X86\3\HPPAPTS0.DLL:36 14:\\\\jlp\print$\W32X86\3\HPPASNM0.DLL:36 15:\\\\jlp\print$\W32X86\3\HPPAPML0.DLL:36 16:\\\\jlp\print$\W32X86\3\HPZIPM12.EXE:36 17:\\\\jlp\print$\W32X86\3\HPZIPT12.DLL:36 18:\\\\jlp\print$\W32X86\3\HPZINW12.EXE:36 19:\\\\jlp\print$\W32X86\3\HPZIPR12.DLL:36 20:\\\\jlp\print$\W32X86\3\HPZISN12.DLL:36 21:\\\\jlp\print$\W32X86\3\HPJCMN2U.DLL:36 22:\\\\jlp\print$\W32X86\3\HPJIPX1U.DLL:36 23:\\\\jlp\print$\W32X86\3\HPZIDR12.DLL:36 24:\\\\jlp\print$\W32X86\3\hpz6m043.gpd:36 25:\\\\jlp\print$\W32X86\3\hpzsm043.gpd:36 26:\\\\jlp\print$\W32X86\3\pjl.gpd:31 27:\\\\jlp\print$\W32X86\3\pclxl.gpd:33 28:\\\\jlp\print$\W32X86\3\pclxl.dll:33 29:\\\\jlp\print$\W32X86\3\hpzst043.dll:36 30:\\\\jlp\print$\W32X86\3\hpwp2800.cfg:36 31:\\\\jlp\print$\W32X86\3\hpw2800c.ini:36 32:\\\\jlp\print$\W32X86\3\hpw28006.xml:36 33:\\\\jlp\print$\W32X86\3\hpzsc043.dtd:36 34:\\\\jlp\print$\W32X86\3\hpzev043.dll:36 35:\\\\jlp\print$\W32X86\3\hpzar043.hlp:36 36:\\\\jlp\print$\W32X86\3\hpzhc043.hlp:36 37:\\\\jlp\print$\W32X86\3\hpzht043.hlp:36 38:\\\\jlp\print$\W32X86\3\hpzcs043.hlp:36 39:\\\\jlp\print$\W32X86\3\hpzda043.hlp:36 40:\\\\jlp\print$\W32X86\3\hpznl043.hlp:36 41:\\\\jlp\print$\W32X86\3\hpzen043.hlp:36 42:\\\\jlp\print$\W32X86\3\hpzfi043.hlp:36 43:\\\\jlp\print$\W32X86\3\hpzfr043.hlp:36 44:\\\\jlp\print$\W32X86\3\hpzde043.hlp:36 45:\\\\jlp\print$\W32X86\3\hpzel043.hlp:36 46:\\\\jlp\print$\W32X86\3\hpzhe043.hlp:36 47:\\\\jlp\print$\W32X86\3\hpzhu043.hlp:36 48:\\\\jlp\print$\W32X86\3\hpzit043.hlp:36 49:\\\\jlp\print$\W32X86\3\hpzja043.hlp:36 50:\\\\jlp\print$\W32X86\3\hpzko043.hlp:36 51:\\\\jlp\print$\W32X86\3\hpzno043.hlp:36 52:\\\\jlp\print$\W32X86\3\hpzpl043.hlp:36 53:\\\\jlp\print$\W32X86\3\hpzpt043.hlp:36 54:\\\\jlp\print$\W32X86\3\hpzru043.hlp:36 55:\\\\jlp\print$\W32X86\3\hpzes043.hlp:36 56:\\\\jlp\print$\W32X86\3\hpzsv043.hlp:36 57:\\\\jlp\print$\W32X86\3\hpzsk043.hlp:36 58:\\\\jlp\print$\W32X86\3\hpzth043.hlp:36 59:\\\\jlp\print$\W32X86\3\hpztr043.hlp:36 60:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 61:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 62:\\\\jlp:7 last one:done driver: [Minolta Di351/251/200 PCL6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/Minolta Di351/251/200 PCL6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\M_1_UMPD.DLL:36 1:\\\\jlp\print$\W32X86\3\MLTWM__1.EXE:36 2:\\\\jlp\print$\W32X86\3\MLTXL__1.XPI:36 3:\\\\jlp\print$\W32X86\3\MGENUS_1.DLL:36 4:\\\\jlp\print$\W32X86\3\MLTHLP_1.HLP:36 5:\\\\jlp\print$\W32X86\3\MLTGUI_1.DLL:36 6:\\\\jlp\print$\W32X86\3\MLTSRV_1.DLL:36 7:\\\\jlp\print$\W32X86\3\MSUMLT_1.INI:36 8:\\\\jlp:7 last one:done adding driver [0]'s size adding driver [1]'s size adding driver [2]'s size adding driver [3]'s size adding driver [4]'s size [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00002c2a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_INSUFFICIENT_BUFFER [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 1990 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1124 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000016 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20166 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 16 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 4344 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x10f8 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8513 of length 4348 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20230 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30056 (0x7568) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] EE 05 00 00 01 10 00 00 00 B8 10 00 00 17 00 00 ?....... .?...... [010] 00 88 2C 00 00 00 00 0A 00 18 90 0A 00 06 00 00 ..,..... ........ [020] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [030] 00 70 00 00 00 34 90 0A 00 0F 00 00 00 00 00 00 .p...4.. ........ [040] 00 0F 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [050] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [060] 00 00 00 00 00 03 00 00 00 60 90 0A 00 2A 2C 00 ........ .`...*,. [070] 00 78 01 7A 01 08 9F 7A 01 20 8B 7A 01 DA 8A 7A .x.z...z . .z.?.z [080] 01 90 8A 7A 01 46 8A 7A 01 00 8A 7A 01 0C 7E 7A ...z.F.z ...z..~z [090] 01 E8 7D 7A 01 E6 7D 7A 01 03 00 00 00 CA 7D 7A .?}z.?}z .....?}z [0A0] 01 AC 7D 7A 01 66 7D 7A 01 1E 7D 7A 01 D4 7C 7A .?}z.f}z ..}z.?|z [0B0] 01 8E 7C 7A 01 B4 7B 7A 01 B2 7B 7A 01 B0 7B 7A ..|z.?{z .?{z.?{z [0C0] 01 03 00 00 00 7E 7B 7A 01 60 7B 7A 01 16 7B 7A .....~{z .`{z..{z [0D0] 01 CC 7A 7A 01 82 7A 7A 01 38 7A 7A 01 0E 77 7A .?zz..zz .8zz..wz [0E0] 01 0C 77 7A 01 0A 77 7A 01 03 00 00 00 E6 76 7A ..wz..wz .....?vz [0F0] 01 C8 76 7A 01 82 76 7A 01 3A 76 7A 01 F0 75 7A .?vz..vz .:vz.?uz [100] 01 AA 75 7A 01 88 74 7A 01 86 74 7A 01 84 74 7A .?uz..tz ..tz..tz [110] 01 03 00 00 00 48 74 7A 01 2A 74 7A 01 E4 73 7A .....Htz .*tz.?sz [120] 01 9A 73 7A 01 50 73 7A 01 0A 73 7A 01 46 61 7A ..sz.Psz ..sz.Faz [130] 01 1C 61 7A 01 1A 61 7A 01 03 00 00 00 E4 60 7A ..az..az .....?`z [140] 01 C6 60 7A 01 7C 60 7A 01 32 60 7A 01 E8 5F 7A .?`z.|`z .2`z.?_z [150] 01 E6 5F 7A 01 94 5D 7A 01 92 5D 7A 01 90 5D 7A .?_z..]z ..]z..]z [160] 01 00 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C .....\.\ .\.\.j.l [170] 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 .p.\.p.r .i.n.t.$ [180] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [190] 00 33 00 5C 00 4D 00 53 00 55 00 4D 00 4C 00 54 .3.\.M.S .U.M.L.T [1A0] 00 5F 00 31 00 2E 00 49 00 4E 00 49 00 00 00 5C ._.1...I .N.I...\ [1B0] 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 .\.\.\.j .l.p.\.p [1C0] 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 .r.i.n.t .$.\.W.3 [1D0] 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 4D .2.X.8.6 .\.3.\.M [1E0] 00 4C 00 54 00 53 00 52 00 56 00 5F 00 31 00 2E .L.T.S.R .V._.1.. [1F0] 00 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 5C .D.L.L.. .\.\.\.\ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBwriteX (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 01 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 10b8 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 1 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 4264, incoming data = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00002c88 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 4264 [2006/02/17 10:11:42, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7568 nwritten=4280 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20230 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 4344 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x10f8 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8514 of length 4348 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=4344 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20294 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30056 (0x7568) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 4280 (0x10B8) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 4280 (0x10B8) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=4281 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] EE 05 00 00 00 10 00 00 00 B8 10 00 00 17 00 00 ?....... .?...... [010] 00 E8 1B 00 00 00 00 0A 00 33 00 5C 00 48 00 50 .?...... .3.\.H.P [020] 00 4A 00 43 00 4D 00 4E 00 32 00 55 00 2E 00 44 .J.C.M.N .2.U...D [030] 00 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 5C 00 6A .L.L...\ .\.\.\.j [040] 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 .l.p.\.p .r.i.n.t [050] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [060] 00 5C 00 33 00 5C 00 48 00 50 00 5A 00 49 00 53 .\.3.\.H .P.Z.I.S [070] 00 4E 00 31 00 32 00 2E 00 44 00 4C 00 4C 00 00 .N.1.2.. .D.L.L.. [080] 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C .\.\.\.\ .j.l.p.\ [090] 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 .p.r.i.n .t.$.\.W [0A0] 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C .3.2.X.8 .6.\.3.\ [0B0] 00 48 00 50 00 5A 00 49 00 50 00 52 00 31 00 32 .H.P.Z.I .P.R.1.2 [0C0] 00 2E 00 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C ...D.L.L ...\.\.\ [0D0] 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 .\.j.l.p .\.p.r.i [0E0] 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 .n.t.$.\ .W.3.2.X [0F0] 00 38 00 36 00 5C 00 33 00 5C 00 48 00 50 00 5A .8.6.\.3 .\.H.P.Z [100] 00 49 00 4E 00 57 00 31 00 32 00 2E 00 45 00 58 .I.N.W.1 .2...E.X [110] 00 45 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C .E...\.\ .\.\.j.l [120] 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 .p.\.p.r .i.n.t.$ [130] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [140] 00 33 00 5C 00 48 00 50 00 5A 00 49 00 50 00 54 .3.\.H.P .Z.I.P.T [150] 00 31 00 32 00 2E 00 44 00 4C 00 4C 00 00 00 5C .1.2...D .L.L...\ [160] 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 .\.\.\.j .l.p.\.p [170] 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 .r.i.n.t .$.\.W.3 [180] 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 48 .2.X.8.6 .\.3.\.H [190] 00 50 00 5A 00 49 00 50 00 4D 00 31 00 32 00 2E .P.Z.I.P .M.1.2.. [1A0] 00 45 00 58 00 45 00 00 00 5C 00 5C 00 5C 00 5C .E.X.E.. .\.\.\.\ [1B0] 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E .j.l.p.\ .p.r.i.n [1C0] 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 .t.$.\.W .3.2.X.8 [1D0] 00 36 00 5C 00 33 00 5C 00 48 00 50 00 50 00 41 .6.\.3.\ .H.P.P.A [1E0] 00 50 00 4D 00 4C 00 30 00 2E 00 44 00 4C 00 4C .P.M.L.0 ...D.L.L [1F0] 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 ...\.\.\ .\.j.l.p [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBwriteX (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 4280, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 4264 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 10b8 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 4264, incoming data = 4264 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00001be8 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 4264 [2006/02/17 10:11:42, 3] smbd/pipes.c:reply_pipe_write_and_X(207) writeX-IPC pnum=7568 nwritten=4280 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20294 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4280 (0x10B8) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 2996 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0xbb4 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8515 of length 3000 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=2996 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20358 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 2912 (0xB60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 2912 (0xB60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=2929 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 02 10 00 00 00 60 0B 00 00 17 00 00 ........ .`...... [020] 00 48 0B 00 00 00 00 0A 00 32 00 58 00 38 00 36 .H...... .2.X.8.6 [030] 00 5C 00 33 00 5C 00 55 00 4E 00 49 00 44 00 52 .\.3.\.U .N.I.D.R [040] 00 56 00 2E 00 44 00 4C 00 4C 00 00 00 57 00 69 .V...D.L .L...W.i [050] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 .n.d.o.w .s. .N.T [060] 00 20 00 78 00 38 00 36 00 00 00 41 00 70 00 6F . .x.8.6 ...A.p.o [070] 00 6C 00 6C 00 6F 00 20 00 50 00 2D 00 31 00 32 .l.l.o. .P.-.1.2 [080] 00 30 00 30 00 00 00 00 00 48 00 50 00 20 00 4D .0.0.... .H.P. .M [090] 00 61 00 73 00 74 00 65 00 72 00 20 00 4D 00 6F .a.s.t.e .r. .M.o [0A0] 00 6E 00 69 00 74 00 6F 00 72 00 00 00 5C 00 5C .n.i.t.o .r...\.\ [0B0] 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 .\.\.j.l .p.\.p.r [0C0] 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 .i.n.t.$ .\.W.3.2 [0D0] 00 58 00 38 00 36 00 5C 00 33 00 5C 00 53 00 54 .X.8.6.\ .3.\.S.T [0E0] 00 44 00 4E 00 41 00 4D 00 45 00 53 00 2E 00 47 .D.N.A.M .E.S...G [0F0] 00 50 00 44 00 00 00 5C 00 5C 00 5C 00 5C 00 6A .P.D...\ .\.\.\.j [100] 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 .l.p.\.p .r.i.n.t [110] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [120] 00 5C 00 33 00 5C 00 55 00 4E 00 49 00 52 00 45 .\.3.\.U .N.I.R.E [130] 00 53 00 2E 00 44 00 4C 00 4C 00 00 00 5C 00 5C .S...D.L .L...\.\ [140] 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 .\.\.j.l .p.\.p.r [150] 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 .i.n.t.$ .\.W.3.2 [160] 00 58 00 38 00 36 00 5C 00 33 00 5C 00 50 00 43 .X.8.6.\ .3.\.P.C [170] 00 4C 00 58 00 4C 00 2E 00 47 00 50 00 44 00 00 .L.X.L.. .G.P.D.. [180] 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C .\.\.\.\ .j.l.p.\ [190] 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 .p.r.i.n .t.$.\.W [1A0] 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C .3.2.X.8 .6.\.3.\ [1B0] 00 50 00 36 00 44 00 49 00 53 00 50 00 2E 00 47 .P.6.D.I .S.P...G [1C0] 00 50 00 44 00 00 00 5C 00 5C 00 5C 00 5C 00 6A .P.D...\ .\.\.\.j [1D0] 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 .l.p.\.p .r.i.n.t [1E0] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [1F0] 00 5C 00 33 00 5C 00 50 00 4A 00 4C 00 2E 00 47 .\.3.\.P .J.L...G [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=2912 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 2912 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 2912 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 2912 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 2912, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 2896 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 2896 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0b60 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 2 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 2896 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 2896, incoming data = 2896 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000b48 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 000a9018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 000a9034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 0000000f [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 0000000f [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 ptr: 000a9060 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000054 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 size: 00002c2a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 2c84 offered: 00002c2a [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows NT x86] and version [0] we have:[0] drivers in environment [Windows NT x86] and version [1] we have:[0] drivers in environment [Windows NT x86] and version [2] we have:[5] drivers in environment [Windows NT x86] and version [3] driver: [HP Color LaserJet 4650 PCL 6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP Color LaserJet 4650 PCL 6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\HPC46506.XML:36 1:\\\\jlp\print$\W32X86\3\HPZSC2IG.DTD:36 2:\\\\jlp\print$\W32X86\3\HPLJ4650.CFG:36 3:\\\\jlp\print$\W32X86\3\HPC4650C.INI:36 4:\\\\jlp\print$\W32X86\3\HPZST2IG.DLL:36 5:\\\\jlp\print$\W32X86\3\HPZUI2IG.DLL:36 6:\\\\jlp\print$\W32X86\3\HPZ6R2IG.DLL:36 7:\\\\jlp\print$\W32X86\3\HPZ6M2IG.GPD:36 8:\\\\jlp\print$\W32X86\3\HPZSM2IG.GPD:36 9:\\\\jlp\print$\W32X86\3\HPZEV2IG.DLL:36 10:\\\\jlp\print$\W32X86\3\HPZHL2IG.HLP:36 11:\\\\jlp\print$\W32X86\3\HPCDMC32.DLL:36 12:\\\\jlp\print$\W32X86\3\HPBCFGRE.DLL:36 13:\\\\jlp\print$\W32X86\3\HPNRA.EXE:33 14:\\\\jlp\print$\W32X86\3\HPBNRAC2.DLL:36 15:\\\\jlp\print$\W32X86\3\HPBMINI.DLL:35 16:\\\\jlp\print$\W32X86\3\HPCEAC05.HPI:36 17:\\\\jlp\print$\W32X86\3\HPBMIAPI.DLL:36 18:\\\\jlp\print$\W32X86\3\HPBOID.EXE:34 19:\\\\jlp\print$\W32X86\3\HPBOIDPS.DLL:36 20:\\\\jlp\print$\W32X86\3\HPBPRO.EXE:34 21:\\\\jlp\print$\W32X86\3\HPBPROPS.DLL:36 22:\\\\jlp\print$\W32X86\3\HPPAPTS0.DLL:36 23:\\\\jlp\print$\W32X86\3\HPPASNM0.DLL:36 24:\\\\jlp\print$\W32X86\3\HPPAPML0.DLL:36 25:\\\\jlp\print$\W32X86\3\HPZIPM12.EXE:36 26:\\\\jlp\print$\W32X86\3\HPZIPT12.DLL:36 27:\\\\jlp\print$\W32X86\3\HPZINW12.EXE:36 28:\\\\jlp\print$\W32X86\3\HPZIPR12.DLL:36 29:\\\\jlp\print$\W32X86\3\HPZISN12.DLL:36 30:\\\\jlp\print$\W32X86\3\HPJCMN2U.DLL:36 31:\\\\jlp\print$\W32X86\3\HPJIPX1U.DLL:36 32:\\\\jlp\print$\W32X86\3\HPZIDR12.DLL:36 33:\\\\jlp\print$\W32X86\3\HPBMMON.DLL:35 34:\\\\jlp\print$\W32X86\3\HPDOMON.DLL:35 35:\\\\jlp\print$\W32X86\3\HPBHEALR.DLL:36 36:\\\\jlp\print$\W32X86\3\PCLXL.DLL:33 37:\\\\jlp\print$\W32X86\3\PJL.GPD:31 38:\\\\jlp\print$\W32X86\3\P6DISP.GPD:34 39:\\\\jlp\print$\W32X86\3\PCLXL.GPD:33 40:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 41:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 42:\\\\jlp:7 last one:done driver: [Apollo P-1200] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/Apollo P-1200] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\HPDJRES.DLL:35 1:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 2:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 3:\\\\jlp:7 last one:done driver: [HP DesignJet 1050C by HP] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP DesignJet 1050C by HP] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\hpltui.dll:34 1:\\\\jlp\print$\W32X86\3\hpltumpd.dll:36 2:\\\\jlp\print$\W32X86\3\HPGLRTL3.HLP:36 3:\\\\jlp\print$\W32X86\3\HPGLRTL2.HPM:36 4:\\\\jlp\print$\W32X86\3\HPGLRTL4.HPM:36 5:\\\\jlp\print$\W32X86\3\HPGLRTL8.HPM:36 6:\\\\jlp\print$\W32X86\3\HPLTCAL4.DLL:36 7:\\\\jlp\print$\W32X86\3\HPLTLNK.EXE:35 8:\\\\jlp\print$\W32X86\3\HPLTCOL1.EXE:36 9:\\\\jlp\print$\W32X86\3\HPLTSAM1.SPL:36 10:\\\\jlp\print$\W32X86\3\HPLTSAM2.SPL:36 11:\\\\jlp:7 last one:done driver: [HP Business Inkjet 2800 PCL 6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/HP Business Inkjet 2800 PCL 6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\hpzui043.dll:36 1:\\\\jlp\print$\W32X86\3\hpcdmc32.dll:36 2:\\\\jlp\print$\W32X86\3\hpbcfgre.dll:36 3:\\\\jlp\print$\W32X86\3\hpz6r043.dll:36 4:\\\\jlp\print$\W32X86\3\HPNRA.EXE:33 5:\\\\jlp\print$\W32X86\3\HPBNRAC2.DLL:36 6:\\\\jlp\print$\W32X86\3\HPBMINI.DLL:35 7:\\\\jlp\print$\W32X86\3\HPCEAC05.HPI:36 8:\\\\jlp\print$\W32X86\3\HPBMIAPI.DLL:36 9:\\\\jlp\print$\W32X86\3\HPBOID.EXE:34 10:\\\\jlp\print$\W32X86\3\HPBOIDPS.DLL:36 11:\\\\jlp\print$\W32X86\3\HPBPRO.EXE:34 12:\\\\jlp\print$\W32X86\3\HPBPROPS.DLL:36 13:\\\\jlp\print$\W32X86\3\HPPAPTS0.DLL:36 14:\\\\jlp\print$\W32X86\3\HPPASNM0.DLL:36 15:\\\\jlp\print$\W32X86\3\HPPAPML0.DLL:36 16:\\\\jlp\print$\W32X86\3\HPZIPM12.EXE:36 17:\\\\jlp\print$\W32X86\3\HPZIPT12.DLL:36 18:\\\\jlp\print$\W32X86\3\HPZINW12.EXE:36 19:\\\\jlp\print$\W32X86\3\HPZIPR12.DLL:36 20:\\\\jlp\print$\W32X86\3\HPZISN12.DLL:36 21:\\\\jlp\print$\W32X86\3\HPJCMN2U.DLL:36 22:\\\\jlp\print$\W32X86\3\HPJIPX1U.DLL:36 23:\\\\jlp\print$\W32X86\3\HPZIDR12.DLL:36 24:\\\\jlp\print$\W32X86\3\hpz6m043.gpd:36 25:\\\\jlp\print$\W32X86\3\hpzsm043.gpd:36 26:\\\\jlp\print$\W32X86\3\pjl.gpd:31 27:\\\\jlp\print$\W32X86\3\pclxl.gpd:33 28:\\\\jlp\print$\W32X86\3\pclxl.dll:33 29:\\\\jlp\print$\W32X86\3\hpzst043.dll:36 30:\\\\jlp\print$\W32X86\3\hpwp2800.cfg:36 31:\\\\jlp\print$\W32X86\3\hpw2800c.ini:36 32:\\\\jlp\print$\W32X86\3\hpw28006.xml:36 33:\\\\jlp\print$\W32X86\3\hpzsc043.dtd:36 34:\\\\jlp\print$\W32X86\3\hpzev043.dll:36 35:\\\\jlp\print$\W32X86\3\hpzar043.hlp:36 36:\\\\jlp\print$\W32X86\3\hpzhc043.hlp:36 37:\\\\jlp\print$\W32X86\3\hpzht043.hlp:36 38:\\\\jlp\print$\W32X86\3\hpzcs043.hlp:36 39:\\\\jlp\print$\W32X86\3\hpzda043.hlp:36 40:\\\\jlp\print$\W32X86\3\hpznl043.hlp:36 41:\\\\jlp\print$\W32X86\3\hpzen043.hlp:36 42:\\\\jlp\print$\W32X86\3\hpzfi043.hlp:36 43:\\\\jlp\print$\W32X86\3\hpzfr043.hlp:36 44:\\\\jlp\print$\W32X86\3\hpzde043.hlp:36 45:\\\\jlp\print$\W32X86\3\hpzel043.hlp:36 46:\\\\jlp\print$\W32X86\3\hpzhe043.hlp:36 47:\\\\jlp\print$\W32X86\3\hpzhu043.hlp:36 48:\\\\jlp\print$\W32X86\3\hpzit043.hlp:36 49:\\\\jlp\print$\W32X86\3\hpzja043.hlp:36 50:\\\\jlp\print$\W32X86\3\hpzko043.hlp:36 51:\\\\jlp\print$\W32X86\3\hpzno043.hlp:36 52:\\\\jlp\print$\W32X86\3\hpzpl043.hlp:36 53:\\\\jlp\print$\W32X86\3\hpzpt043.hlp:36 54:\\\\jlp\print$\W32X86\3\hpzru043.hlp:36 55:\\\\jlp\print$\W32X86\3\hpzes043.hlp:36 56:\\\\jlp\print$\W32X86\3\hpzsv043.hlp:36 57:\\\\jlp\print$\W32X86\3\hpzsk043.hlp:36 58:\\\\jlp\print$\W32X86\3\hpzth043.hlp:36 59:\\\\jlp\print$\W32X86\3\hpztr043.hlp:36 60:\\\\jlp\print$\W32X86\3\UNIRES.DLL:34 61:\\\\jlp\print$\W32X86\3\STDNAMES.GPD:36 62:\\\\jlp:7 last one:done driver: [Minolta Di351/251/200 PCL6] [2006/02/17 10:11:42, 8] printing/nt_printing.c:get_a_printer_driver_3(2077) get_a_printer_driver_3: [DRIVERS/W32X86/3/Minolta Di351/251/200 PCL6] [2006/02/17 10:11:42, 6] rpc_server/srv_spoolss_nt.c:init_unistr_array(5068) init_unistr_array 0:\\\\jlp\print$\W32X86\3\M_1_UMPD.DLL:36 1:\\\\jlp\print$\W32X86\3\MLTWM__1.EXE:36 2:\\\\jlp\print$\W32X86\3\MLTXL__1.XPI:36 3:\\\\jlp\print$\W32X86\3\MGENUS_1.DLL:36 4:\\\\jlp\print$\W32X86\3\MLTHLP_1.HLP:36 5:\\\\jlp\print$\W32X86\3\MLTGUI_1.DLL:36 6:\\\\jlp\print$\W32X86\3\MLTSRV_1.DLL:36 7:\\\\jlp\print$\W32X86\3\MSUMLT_1.INI:36 8:\\\\jlp:7 last one:done adding driver [0]'s size adding driver [1]'s size adding driver [2]'s size adding driver [3]'s size adding driver [4]'s size adding driver [0] to buffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_printer_driver_info_3 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 version: 00000003 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002bf0 smb_io_unistr name [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2bf0 unistr: H.P. .C.o.l.o.r. .L.a.s.e.r.J.e.t. .4.6.5.0. .P.C.L. .6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 offset: 00002bf0 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002bd2 smb_io_unistr architecture [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2bd2 unistr: W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset: 00002bd2 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002b8c smb_io_unistr driverpath [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2b8c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c offset: 00002b8c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002b42 smb_io_unistr datafile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2b42 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.4.6.5.0.6...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 offset: 00002b42 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002af8 smb_io_unistr configfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2af8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V.U.I...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 offset: 00002af8 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002ab2 smb_io_unistr helpfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2ab2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...H.L.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 offset: 00002ab2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 2ab0 leading zero: 0000 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002a66 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2a66 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.4.6.5.0.6...X.M.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002a1c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2a1c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.S.C.2.I.G...D.T.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0029d2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 29d2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.J.4.6.5.0...C.F.G... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002988 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2988 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.4.6.5.0.C...I.N.I... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00293e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 293e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.S.T.2.I.G...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0028f4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 28f4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.U.I.2.I.G...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0028aa smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 28aa unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.6.R.2.I.G...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002860 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2860 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.6.M.2.I.G...G.P.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002816 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2816 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.S.M.2.I.G...G.P.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0027cc smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 27cc unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.E.V.2.I.G...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002782 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2782 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.H.L.2.I.G...H.L.P... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002738 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2738 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.D.M.C.3.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0026ee smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 26ee unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.C.F.G.R.E...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0026aa smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 26aa unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.N.R.A...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002660 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2660 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.N.R.A.C.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002618 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2618 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.M.I.N.I...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0025ce smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 25ce unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.E.A.C.0.5...H.P.I... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002584 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2584 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.M.I.A.P.I...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00253e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 253e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.O.I.D...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0024f4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 24f4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.O.I.D.P.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0024ae smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 24ae unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.P.R.O...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002464 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2464 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.P.R.O.P.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00241a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 241a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.P.T.S.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0023d0 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 23d0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.S.N.M.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002386 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2386 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.P.M.L.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00233c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 233c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.M.1.2...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0022f2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 22f2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.T.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0022a8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 22a8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.N.W.1.2...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00225e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 225e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.R.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002214 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2214 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.S.N.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0021ca smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 21ca unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.J.C.M.N.2.U...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002180 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2180 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.J.I.P.X.1.U...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002136 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2136 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.D.R.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0020ee smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 20ee unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.M.M.O.N...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0020a6 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 20a6 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.D.O.M.O.N...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00205c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 205c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.H.E.A.L.R...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 002018 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 2018 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.P.C.L.X.L...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001fd8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1fd8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.P.J.L...G.P.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001f92 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1f92 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.P.6.D.I.S.P...G.P.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001f4e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1f4e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.P.C.L.X.L...G.P.D... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001f08 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1f08 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.R.E.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001ebe smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1ebe unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.S.T.D.N.A.M.E.S...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c offset: 00001ebe [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001e9a smb_io_unistr monitorname [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1e9a unistr: H.P. .M.a.s.t.e.r. .M.o.n.i.t.o.r... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 offset: 00001e9a [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001e98 smb_io_unistr defaultdatatype [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1e98 unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset: 00001e98 adding driver [1] to buffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000028 smb_io_printer_driver_info_3 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 version: 00000003 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001e7c smb_io_unistr name [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1e7c unistr: A.p.o.l.l.o. .P.-.1.2.0.0... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 002c offset: 00001e54 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001e5e smb_io_unistr architecture [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1e5e unistr: W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0030 offset: 00001e36 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001e18 smb_io_unistr driverpath [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1e18 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0034 offset: 00001df0 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001dd0 smb_io_unistr datafile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1dd0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.A.A.P.1.2.0.0...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0038 offset: 00001da8 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001d86 smb_io_unistr configfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1d86 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V.U.I...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 003c offset: 00001d5e [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001d40 smb_io_unistr helpfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1d40 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...H.L.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0040 offset: 00001d18 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 1d3e leading zero: 0000 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001cf6 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1cf6 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.D.J.R.E.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001cb0 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1cb0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.R.E.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001c66 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1c66 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.S.T.D.N.A.M.E.S...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 offset: 00001c3e [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001c64 smb_io_unistr monitorname [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1c64 unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0048 offset: 00001c3c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001c62 smb_io_unistr defaultdatatype [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1c62 unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c offset: 00001c3a adding driver [2] to buffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_printer_driver_info_3 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 version: 00000003 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001c30 smb_io_unistr name [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1c30 unistr: H.P. .D.e.s.i.g.n.J.e.t. .1.0.5.0.C. .b.y. .H.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 offset: 00001be0 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001c12 smb_io_unistr architecture [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1c12 unistr: W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0058 offset: 00001bc2 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001bc8 smb_io_unistr driverpath [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1bc8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.l.t.d.r.v.1...d.l.l... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c offset: 00001b78 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001b7e smb_io_unistr datafile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1b7e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.l.t.d.r.v.1...d.l.l... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0060 offset: 00001b2e [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001b34 smb_io_unistr configfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1b34 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.l.t.u.i.n.t...d.l.l... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0064 offset: 00001ae4 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001aea smb_io_unistr helpfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1aea unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.G.L.R.T.L.2...H.L.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0068 offset: 00001a9a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 1ae8 leading zero: 0000 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001aa2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1aa2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.l.t.u.i...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001a58 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1a58 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.l.t.u.m.p.d...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001a0e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1a0e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.G.L.R.T.L.3...H.L.P... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0019c4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 19c4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.G.L.R.T.L.2...H.P.M... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00197a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 197a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.G.L.R.T.L.4...H.P.M... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001930 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1930 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.G.L.R.T.L.8...H.P.M... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0018e6 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 18e6 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.T.C.A.L.4...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00189e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 189e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.T.L.N.K...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001854 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1854 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.T.C.O.L.1...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00180a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 180a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.T.S.A.M.1...S.P.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0017c0 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 17c0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.L.T.S.A.M.2...S.P.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 006c offset: 00001770 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0017be smb_io_unistr monitorname [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 17be unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0070 offset: 0000176e [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0017bc smb_io_unistr defaultdatatype [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 17bc unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0074 offset: 0000176c adding driver [3] to buffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000078 smb_io_printer_driver_info_3 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0078 version: 00000003 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001780 smb_io_unistr name [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1780 unistr: H.P. .B.u.s.i.n.e.s.s. .I.n.k.j.e.t. .2.8.0.0. .P.C.L. .6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 007c offset: 00001708 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001762 smb_io_unistr architecture [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1762 unistr: W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0080 offset: 000016ea [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00171c smb_io_unistr driverpath [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 171c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0084 offset: 000016a4 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0016d2 smb_io_unistr datafile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 16d2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.W.2.8.0.0.6...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0088 offset: 0000165a [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001688 smb_io_unistr configfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1688 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V.U.I...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 008c offset: 00001610 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001642 smb_io_unistr helpfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1642 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.D.R.V...H.L.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0090 offset: 000015ca [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 1640 leading zero: 0000 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0015f6 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 15f6 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.u.i.0.4.3...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0015ac smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 15ac unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.c.d.m.c.3.2...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001562 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1562 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.b.c.f.g.r.e...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001518 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1518 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.6.r.0.4.3...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0014d4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 14d4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.N.R.A...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00148a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 148a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.N.R.A.C.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001442 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1442 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.M.I.N.I...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0013f8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 13f8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.C.E.A.C.0.5...H.P.I... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0013ae smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 13ae unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.M.I.A.P.I...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001368 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1368 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.O.I.D...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00131e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 131e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.O.I.D.P.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0012d8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 12d8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.P.R.O...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00128e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 128e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.B.P.R.O.P.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001244 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1244 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.P.T.S.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0011fa smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 11fa unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.S.N.M.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0011b0 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 11b0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.P.A.P.M.L.0...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001166 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1166 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.M.1.2...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00111c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 111c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.T.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0010d2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 10d2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.N.W.1.2...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 001088 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 1088 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.P.R.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00103e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 103e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.S.N.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000ff4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0ff4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.J.C.M.N.2.U...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000faa smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0faa unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.J.I.P.X.1.U...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000f60 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0f60 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.H.P.Z.I.D.R.1.2...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000f16 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0f16 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.6.m.0.4.3...g.p.d... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000ecc smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0ecc unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.s.m.0.4.3...g.p.d... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000e8c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0e8c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.p.j.l...g.p.d... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000e48 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0e48 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.p.c.l.x.l...g.p.d... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000e04 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0e04 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.p.c.l.x.l...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000dba smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0dba unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.s.t.0.4.3...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000d70 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0d70 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.w.p.2.8.0.0...c.f.g... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000d26 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0d26 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.w.2.8.0.0.c...i.n.i... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000cdc smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0cdc unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.w.2.8.0.0.6...x.m.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000c92 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0c92 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.s.c.0.4.3...d.t.d... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000c48 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0c48 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.e.v.0.4.3...d.l.l... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000bfe smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0bfe unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.a.r.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000bb4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0bb4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.h.c.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000b6a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0b6a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.h.t.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000b20 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0b20 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.c.s.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000ad6 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0ad6 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.d.a.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000a8c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0a8c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.n.l.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000a42 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0a42 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.e.n.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0009f8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 09f8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.f.i.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0009ae smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 09ae unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.f.r.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000964 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0964 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.d.e.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00091a smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 091a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.e.l.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0008d0 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 08d0 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.h.e.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000886 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0886 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.h.u.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00083c smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 083c unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.i.t.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0007f2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 07f2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.j.a.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0007a8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 07a8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.k.o.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00075e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 075e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.n.o.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000714 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0714 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.p.l.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0006ca smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 06ca unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.p.t.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000680 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0680 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.r.u.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000636 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0636 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.e.s.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0005ec smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 05ec unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.s.v.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0005a2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 05a2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.s.k.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000558 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0558 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.t.h.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00050e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 050e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.h.p.z.t.r.0.4.3...h.l.p... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0004c8 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 04c8 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.U.N.I.R.E.S...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00047e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 047e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.S.T.D.N.A.M.E.S...G.P.D... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0094 offset: 00000406 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000454 smb_io_unistr monitorname [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0454 unistr: P.C.L. .L.a.n.g.u.a.g.e. .M.o.n.i.t.o.r... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0098 offset: 000003dc [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000452 smb_io_unistr defaultdatatype [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0452 unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 009c offset: 000003da adding driver [4] to buffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 0000a0 smb_io_printer_driver_info_3 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a0 version: 00000003 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00041c smb_io_unistr name [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 041c unistr: M.i.n.o.l.t.a. .D.i.3.5.1./.2.5.1./.2.0.0. .P.C.L.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a4 offset: 0000037c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0003fe smb_io_unistr architecture [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 03fe unistr: W.i.n.d.o.w.s. .N.T. .x.8.6... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00a8 offset: 0000035e [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0003b4 smb_io_unistr driverpath [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 03b4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.X.L._._.1...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00ac offset: 00000314 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00036a smb_io_unistr datafile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 036a unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.X.L._._.1...P.D.F... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b0 offset: 000002ca [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000320 smb_io_unistr configfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0320 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.G.X.L.U.I._.1...D.L.L... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b4 offset: 00000280 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00031e smb_io_unistr helpfile [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 031e unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00b8 offset: 0000027e [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 031c leading zero: 0000 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0002d2 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 02d2 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M._.1._.U.M.P.D...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000288 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0288 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.W.M._._.1...E.X.E... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00023e smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 023e unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.X.L._._.1...X.P.I... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0001f4 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 01f4 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.G.E.N.U.S._.1...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0001aa smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 01aa unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.H.L.P._.1...H.L.P... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000160 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0160 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.G.U.I._.1...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000116 smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 0116 unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.L.T.S.R.V._.1...D.L.L... [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000cc smb_io_unistr dependentfiles [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 00cc unistr: \.\.\.\.j.l.p.\.p.r.i.n.t.$.\.W.3.2.X.8.6.\.3.\.M.S.U.M.L.T._.1...I.N.I... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00bc offset: 0000002c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000ca smb_io_unistr monitorname [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 00ca unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c0 offset: 0000002a [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 0000c8 smb_io_unistr defaultdatatype [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_unistr(1192) 00c8 unistr: .. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 00c4 offset: 00000028 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00002c2a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 2c34 needed: 00002c2a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 2c38 returned: 00000005 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 2c3c status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 1990 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 2896 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 11328. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 01 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 10b8 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00002c40 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..4280] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=4336 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20358 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 4280 (0x10B8) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=4281 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 01 10 00 00 00 B8 10 00 00 17 00 00 ........ .?...... [010] 00 40 2C 00 00 00 00 00 00 AA BA 00 F0 2A 2C 00 .@,..... .??.?*,. [020] 00 03 00 00 00 F0 2B 00 00 D2 2B 00 00 8C 2B 00 .....?+. .?+...+. [030] 00 42 2B 00 00 F8 2A 00 00 B2 2A 00 00 BE 1E 00 .B+..?*. .?*..?.. [040] 00 9A 1E 00 00 98 1E 00 00 03 00 00 00 54 1E 00 ........ .....T.. [050] 00 36 1E 00 00 F0 1D 00 00 A8 1D 00 00 5E 1D 00 .6...?.. .?...^.. [060] 00 18 1D 00 00 3E 1C 00 00 3C 1C 00 00 3A 1C 00 .....>.. .<...:.. [070] 00 03 00 00 00 E0 1B 00 00 C2 1B 00 00 78 1B 00 .....?.. .?...x.. [080] 00 2E 1B 00 00 E4 1A 00 00 9A 1A 00 00 70 17 00 .....?.. .....p.. [090] 00 6E 17 00 00 6C 17 00 00 03 00 00 00 08 17 00 .n...l.. ........ [0A0] 00 EA 16 00 00 A4 16 00 00 5A 16 00 00 10 16 00 .?...?.. .Z...... [0B0] 00 CA 15 00 00 06 04 00 00 DC 03 00 00 DA 03 00 .?...... .?...?.. [0C0] 00 03 00 00 00 7C 03 00 00 5E 03 00 00 14 03 00 .....|.. .^...... [0D0] 00 CA 02 00 00 80 02 00 00 7E 02 00 00 2C 00 00 .?...... .~...,.. [0E0] 00 2A 00 00 00 28 00 00 00 00 00 00 00 5C 00 5C .*...(.. .....\.\ [0F0] 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 .\.\.j.l .p.\.p.r [100] 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 .i.n.t.$ .\.W.3.2 [110] 00 58 00 38 00 36 00 5C 00 33 00 5C 00 4D 00 53 .X.8.6.\ .3.\.M.S [120] 00 55 00 4D 00 4C 00 54 00 5F 00 31 00 2E 00 49 .U.M.L.T ._.1...I [130] 00 4E 00 49 00 00 00 5C 00 5C 00 5C 00 5C 00 6A .N.I...\ .\.\.\.j [140] 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 .l.p.\.p .r.i.n.t [150] 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 .$.\.W.3 .2.X.8.6 [160] 00 5C 00 33 00 5C 00 4D 00 4C 00 54 00 53 00 52 .\.3.\.M .L.T.S.R [170] 00 56 00 5F 00 31 00 2E 00 44 00 4C 00 4C 00 00 .V._.1.. .D.L.L.. [180] 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C .\.\.\.\ .j.l.p.\ [190] 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 .p.r.i.n .t.$.\.W [1A0] 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C .3.2.X.8 .6.\.3.\ [1B0] 00 4D 00 4C 00 54 00 47 00 55 00 49 00 5F 00 31 .M.L.T.G .U.I._.1 [1C0] 00 2E 00 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C ...D.L.L ...\.\.\ [1D0] 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 .\.j.l.p .\.p.r.i [1E0] 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 .n.t.$.\ .W.3.2.X [1F0] 00 38 00 36 00 5C 00 33 00 5C 00 4D 00 4C 00 54 .8.6.\.3 .\.M.L.T [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 59 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x3b [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8516 of length 63 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20422 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30056 (0x7568) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBreadX (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 4256, prs_offset(&p->out_data.rdata) = 11328. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 10b8 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00001ba0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7568 min=4280 max=4280 nread=4280 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20422 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 17 00 00 00 ........ ?....... [010] A0 1B 00 00 00 00 00 00 70 00 72 00 69 00 6E 00 ?....... p.r.i.n. [020] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [030] 36 00 5C 00 33 00 5C 00 48 00 50 00 5A 00 49 00 6.\.3.\. H.P.Z.I. [040] 50 00 52 00 31 00 32 00 2E 00 44 00 4C 00 4C 00 P.R.1.2. ..D.L.L. [050] 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 ..\.\.\. \.j.l.p. [060] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [070] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [080] 5C 00 48 00 50 00 5A 00 49 00 4E 00 57 00 31 00 \.H.P.Z. I.N.W.1. [090] 32 00 2E 00 45 00 58 00 45 00 00 00 5C 00 5C 00 2...E.X. E...\.\. [0A0] 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 \.\.j.l. p.\.p.r. [0B0] 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 i.n.t.$. \.W.3.2. [0C0] 58 00 38 00 36 00 5C 00 33 00 5C 00 48 00 50 00 X.8.6.\. 3.\.H.P. [0D0] 5A 00 49 00 50 00 54 00 31 00 32 00 2E 00 44 00 Z.I.P.T. 1.2...D. [0E0] 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 L.L...\. \.\.\.j. [0F0] 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 l.p.\.p. r.i.n.t. [100] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [110] 5C 00 33 00 5C 00 48 00 50 00 5A 00 49 00 50 00 \.3.\.H. P.Z.I.P. [120] 4D 00 31 00 32 00 2E 00 45 00 58 00 45 00 00 00 M.1.2... E.X.E... [130] 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 \.\.\.\. j.l.p.\. [140] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [150] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [160] 48 00 50 00 50 00 41 00 50 00 4D 00 4C 00 30 00 H.P.P.A. P.M.L.0. [170] 2E 00 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 ..D.L.L. ..\.\.\. [180] 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 00 \.j.l.p. \.p.r.i. [190] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [1A0] 38 00 36 00 5C 00 33 00 5C 00 48 00 50 00 50 00 8.6.\.3. \.H.P.P. [1B0] 41 00 53 00 4E 00 4D 00 30 00 2E 00 44 00 4C 00 A.S.N.M. 0...D.L. [1C0] 4C 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 L...\.\. \.\.j.l. [1D0] 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 p.\.p.r. i.n.t.$. [1E0] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [1F0] 33 00 5C 00 48 00 50 00 50 00 41 00 50 00 54 00 3.\.H.P. P.A.P.T. [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 59 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x3b [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8517 of length 63 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20486 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30056 (0x7568) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBreadX (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 8512, prs_offset(&p->out_data.rdata) = 11328. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0b18 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000017 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000b00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 3] smbd/pipes.c:reply_pipe_read_and_X(252) readX-IPC pnum=7568 min=4280 max=4280 nread=2840 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=2899 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=65279 smb_uid=113 smb_mid=20486 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 2840 (0xB18) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=2840 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 05 00 02 02 10 00 00 00 18 0B 00 00 17 00 00 00 ........ ........ [010] 00 0B 00 00 00 00 00 00 5C 00 5C 00 5C 00 6A 00 ........ \.\.\.j. [020] 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 l.p.\.p. r.i.n.t. [030] 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 $.\.W.3. 2.X.8.6. [040] 5C 00 33 00 5C 00 48 00 50 00 5A 00 49 00 44 00 \.3.\.H. P.Z.I.D. [050] 52 00 31 00 32 00 2E 00 44 00 4C 00 4C 00 00 00 R.1.2... D.L.L... [060] 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 \.\.\.\. j.l.p.\. [070] 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 p.r.i.n. t.$.\.W. [080] 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 3.2.X.8. 6.\.3.\. [090] 48 00 50 00 4A 00 49 00 50 00 58 00 31 00 55 00 H.P.J.I. P.X.1.U. [0A0] 2E 00 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 ..D.L.L. ..\.\.\. [0B0] 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 00 \.j.l.p. \.p.r.i. [0C0] 6E 00 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 n.t.$.\. W.3.2.X. [0D0] 38 00 36 00 5C 00 33 00 5C 00 48 00 50 00 4A 00 8.6.\.3. \.H.P.J. [0E0] 43 00 4D 00 4E 00 32 00 55 00 2E 00 44 00 4C 00 C.M.N.2. U...D.L. [0F0] 4C 00 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 L...\.\. \.\.j.l. [100] 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 p.\.p.r. i.n.t.$. [110] 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 \.W.3.2. X.8.6.\. [120] 33 00 5C 00 48 00 50 00 5A 00 49 00 53 00 4E 00 3.\.H.P. Z.I.S.N. [130] 31 00 32 00 2E 00 44 00 4C 00 4C 00 00 00 5C 00 1.2...D. L.L...\. [140] 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 \.\.\.j. l.p.\.p. [150] 72 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 r.i.n.t. $.\.W.3. [160] 32 00 58 00 38 00 36 00 5C 00 33 00 5C 00 48 00 2.X.8.6. \.3.\.H. [170] 50 00 5A 00 49 00 50 00 52 00 31 00 32 00 2E 00 P.Z.I.P. R.1.2... [180] 44 00 4C 00 4C 00 00 00 5C 00 5C 00 5C 00 5C 00 D.L.L... \.\.\.\. [190] 6A 00 6C 00 70 00 5C 00 70 00 72 00 69 00 6E 00 j.l.p.\. p.r.i.n. [1A0] 74 00 24 00 5C 00 57 00 33 00 32 00 58 00 38 00 t.$.\.W. 3.2.X.8. [1B0] 36 00 5C 00 33 00 5C 00 48 00 50 00 5A 00 49 00 6.\.3.\. H.P.Z.I. [1C0] 4E 00 57 00 31 00 32 00 2E 00 45 00 58 00 45 00 N.W.1.2. ..E.X.E. [1D0] 00 00 5C 00 5C 00 5C 00 5C 00 6A 00 6C 00 70 00 ..\.\.\. \.j.l.p. [1E0] 5C 00 70 00 72 00 69 00 6E 00 74 00 24 00 5C 00 \.p.r.i. n.t.$.\. [1F0] 57 00 33 00 32 00 58 00 38 00 36 00 5C 00 33 00 W.3.2.X. 8.6.\.3. [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1228 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4cc [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8518 of length 1232 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1228 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20550 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1144 (0x478) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1144 (0x478) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1161 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 78 04 00 00 18 00 00 ........ .x...... [020] 00 60 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .`...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 11 00 00 00 00 00 00 .p...4`. ........ [050] 00 11 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 4E 00 54 00 20 00 52 00 34 00 30 .s. .N.T . .R.4.0 [070] 00 30 00 30 00 00 00 00 00 03 00 00 00 64 60 08 .0.0.... .....d`. [080] 00 00 04 00 00 A0 5C 7A 01 78 01 7A 01 6F 00 77 .....?\z .x.z.o.w [090] 00 73 00 20 00 4E 00 54 00 20 00 78 00 38 00 36 .s. .N.T . .x.8.6 [0A0] 00 00 00 00 00 0B 00 05 00 00 01 0E 00 5C 00 5C ........ .....\.\ [0B0] 00 5C 00 5C 00 6A 00 6C 00 70 00 5C 00 70 00 72 .\.\.j.l .p.\.p.r [0C0] 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 .i.n.t.$ .\.W.3.2 [0D0] 00 58 00 38 00 36 00 5C 00 33 00 5C 00 4D 00 4C .X.8.6.\ .3.\.M.L [0E0] 00 54 00 58 00 4C 00 5F 00 5F 00 31 00 2E 00 44 .T.X.L._ ._.1...D [0F0] 00 4C 00 4C 00 00 00 00 00 00 00 00 00 16 00 10 .L.L.... ........ [100] 00 00 00 0E 00 28 02 7A 01 28 02 7A 01 6A 00 6C .....(.z .(.z.j.l [110] 00 70 00 5C 00 70 00 72 00 69 00 6E 00 74 00 24 .p.\.p.r .i.n.t.$ [120] 00 5C 00 57 00 33 00 32 00 58 00 38 00 36 00 5C .\.W.3.2 .X.8.6.\ [130] 00 33 00 5C 00 4D 00 4C 00 54 00 58 00 4C 00 5F .3.\.M.L .T.X.L._ [140] 00 5F 00 31 00 2E 00 50 00 44 00 46 00 00 00 00 ._.1...P .D.F.... [150] 00 00 00 00 00 0B 00 0B 00 00 00 0E 00 D0 01 7A ........ .....?.z [160] 01 78 28 7A 01 6A 00 6C 00 70 00 5C 00 70 00 72 .x(z.j.l .p.\.p.r [170] 00 69 00 6E 00 74 00 24 00 5C 00 57 00 33 00 32 .i.n.t.$ .\.W.3.2 [180] 00 58 00 38 00 36 00 5C 00 33 00 5C 00 4D 00 47 .X.8.6.\ .3.\.M.G [190] 00 58 00 4C 00 55 00 49 00 5F 00 31 00 2E 00 44 .X.L.U.I ._.1...D [1A0] 00 4C 00 4C 00 00 00 00 00 00 00 00 00 42 00 26 .L.L.... .....B.& [1B0] 00 00 01 08 00 49 00 6E 00 74 00 65 00 6C 00 00 .....I.n .t.e.l.. [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1144 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1144 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1144 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1144 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1144, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1128 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1128 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0478 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000018 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1128 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1128, incoming data = 1128 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000460 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 00000011 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 00000011 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .N.T. .R.4.0.0.0... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 ptr: 00086064 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000058 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0058 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 045c offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows NT R4000] and version [0] we have:[0] drivers in environment [Windows NT R4000] and version [1] we have:[0] drivers in environment [Windows NT R4000] and version [2] we have:[0] drivers in environment [Windows NT R4000] and version [3] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 118 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1128 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000018 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20550 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 18 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1236 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4d4 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8519 of length 1240 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1236 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20614 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1152 (0x480) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1152 (0x480) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1169 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 80 04 00 00 19 00 00 ........ ........ [020] 00 68 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .h...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 15 00 00 00 00 00 00 .p...4`. ........ [050] 00 15 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 4E 00 54 00 20 00 41 00 6C 00 70 .s. .N.T . .A.l.p [070] 00 68 00 61 00 5F 00 41 00 58 00 50 00 00 00 00 .h.a._.A .X.P.... [080] 00 03 00 00 00 6C 60 08 00 00 04 00 00 A0 5C 7A .....l`. .....?\z [090] 01 78 01 7A 01 00 00 00 00 00 00 00 00 00 00 00 .x.z.... ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1152 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1152 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1152 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1152 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1152, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1136 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0480 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000019 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1136, incoming data = 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000468 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 00000015 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 00000015 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .N.T. .A.l.p.h.a._.A.X.P... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0058 level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c ptr: 0008606c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000060 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0060 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0464 offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [0] we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [1] we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [2] we have:[0] drivers in environment [Windows NT Alpha_AXP] and version [3] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 126 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1136 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 00000019 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20614 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 19 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1232 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4d0 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8520 of length 1236 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1232 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20678 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1148 (0x47C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1148 (0x47C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1165 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 5F .\.P.I.P .E.\..._ [010] 00 05 00 00 03 10 00 00 00 7C 04 00 00 1A 00 00 ........ .|...... [020] 00 64 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .d...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 13 00 00 00 00 00 00 .p...4`. ........ [050] 00 13 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 4E 00 54 00 20 00 50 00 6F 00 77 .s. .N.T . .P.o.w [070] 00 65 00 72 00 50 00 43 00 00 00 00 00 03 00 00 .e.r.P.C ........ [080] 00 68 60 08 00 00 04 00 00 A0 5C 7A 01 78 01 7A .h`..... .?\z.x.z [090] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1148 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1148 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1148 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1148 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1148, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1132 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 047c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001a [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1132, incoming data = 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000464 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 00000013 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 00000013 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .N.T. .P.o.w.e.r.P.C... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0054 level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0058 ptr: 00086068 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00005c prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 005c size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0460 offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows NT PowerPC] and version [0] we have:[0] drivers in environment [Windows NT PowerPC] and version [1] we have:[0] drivers in environment [Windows NT PowerPC] and version [2] we have:[0] drivers in environment [Windows NT PowerPC] and version [3] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 122 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1132 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001a [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20678 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 1A 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1216 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4c0 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8521 of length 1220 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1216 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20742 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1132 (0x46C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1132 (0x46C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1149 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 5F .\.P.I.P .E.\..._ [010] 00 05 00 00 03 10 00 00 00 6C 04 00 00 1B 00 00 ........ .l...... [020] 00 54 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .T...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 0C 00 00 00 00 00 00 .p...4`. ........ [050] 00 0C 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 34 00 2E 00 30 00 00 00 03 00 00 .s. .4.. .0...... [070] 00 58 60 08 00 00 04 00 00 A0 5C 7A 01 78 01 7A .X`..... .?\z.x.z [080] 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1132 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1132 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1132, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1116 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1116 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 046c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001b [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1116 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1116, incoming data = 1116 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000454 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 0000000c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 0000000c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .4...0... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0044 level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0048 ptr: 00086058 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 00004c prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0450 offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows 4.0] and version [0] we have:[0] drivers in environment [Windows 4.0] and version [1] we have:[0] drivers in environment [Windows 4.0] and version [2] we have:[0] drivers in environment [Windows 4.0] and version [3] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 108 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1116 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001b [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20742 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 1B 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events [2006/02/17 10:11:42, 10] lib/util_sock.c:read_smb_length_return_keepalive(618) got smb length of 1220 [2006/02/17 10:11:42, 6] smbd/process.c:process_smb(1193) got message type 0x0 of len 0x4c4 [2006/02/17 10:11:42, 3] smbd/process.c:process_smb(1194) Transaction 8522 of length 1224 [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1220 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20806 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1136 (0x470) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 1136 (0x470) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30056 (0x7568) smb_bcc=1153 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 5F .\.P.I.P .E.\..._ [010] 00 05 00 00 03 10 00 00 00 70 04 00 00 1C 00 00 ........ .p...... [020] 00 58 04 00 00 00 00 0A 00 18 60 08 00 06 00 00 .X...... ..`..... [030] 00 00 00 00 00 06 00 00 00 5C 00 5C 00 6A 00 6C ........ .\.\.j.l [040] 00 70 00 00 00 34 60 08 00 0D 00 00 00 00 00 00 .p...4`. ........ [050] 00 0D 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .....W.i .n.d.o.w [060] 00 73 00 20 00 49 00 41 00 36 00 34 00 00 00 00 .s. .I.A .6.4.... [070] 00 03 00 00 00 5C 60 08 00 00 04 00 00 A0 5C 7A .....\`. .....?\z [080] 01 78 01 7A 01 00 00 00 00 00 00 00 00 00 00 00 .x.z.... ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 7355) conn 0xa0c370 [2006/02/17 10:11:42, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/02/17 10:11:42, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=1136 params=0 setup=2 [2006/02/17 10:11:42, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/02/17 10:11:42, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/02/17 10:11:42, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/02/17 10:11:42, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=7568 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name spoolss pnum=7568 (pipes_open=1) [2006/02/17 10:11:42, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7568) [2006/02/17 10:11:42, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x990660 max_trans_reply: 4280 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 7568 name: spoolss open: Yes len: 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 1136 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 1136, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1120 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 1120 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0470 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001c [2006/02/17 10:11:42, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 1120 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 1120, incoming data = 1120 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 00000458 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 000a [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\spoolss [2006/02/17 10:11:42, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: spoolss op 0xa - api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS [2006/02/17 10:11:42, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[24].fn == 0x53bfd0 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_q_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 name_ptr: 00086018 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 uni_max_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0008 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c uni_str_len: 00000006 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 0010 buffer : \.\.j.l.p... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 001c environment_ptr: 00086034 [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_unistr2 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0020 uni_max_len: 0000000d [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0024 offset : 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0028 uni_str_len: 0000000d [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:dbg_rw_punival(904) 002c buffer : W.i.n.d.o.w.s. .I.A.6.4... [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0048 level: 00000003 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 004c ptr: 0008605c [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000050 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0050 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0454 offered: 00000400 [2006/02/17 10:11:42, 4] rpc_server/srv_spoolss_nt.c:_spoolss_enumprinterdrivers(6909) _spoolss_enumprinterdrivers we have:[0] drivers in environment [Windows IA64] and version [0] we have:[0] drivers in environment [Windows IA64] and version [1] we have:[0] drivers in environment [Windows IA64] and version [2] we have:[0] drivers in environment [Windows IA64] and version [3] [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 spoolss_io_r_enumprinterdrivers [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 ptr: f000baaa [2006/02/17 10:11:42, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 prs_rpcbuffer [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 size: 00000400 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0408 needed: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 040c returned: 00000000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_werror(792) 0410 status: WERR_OK [2006/02/17 10:11:42, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called spoolss successfully [2006/02/17 10:11:42, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 110 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 1120 [2006/02/17 10:11:42, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 7568 name: spoolss len: 4280 [2006/02/17 10:11:42, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1044. [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 042c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000001c [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000414 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/02/17 10:11:42, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/02/17 10:11:42, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..1068] [2006/02/17 10:11:42, 5] lib/util.c:show_msg(454) [2006/02/17 10:11:42, 5] lib/util.c:show_msg(464) size=1124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=17 smb_pid=436 smb_uid=113 smb_mid=20806 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1068 (0x42C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1068 (0x42C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1069 [2006/02/17 10:11:42, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 2C 04 00 00 1C 00 00 ........ .,...... [010] 00 14 04 00 00 00 00 00 00 AA BA 00 F0 00 04 00 ........ .??.?... [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [100] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [110] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [120] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [130] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [140] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [150] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [160] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [170] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [180] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [190] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1E0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [1F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [2006/02/17 10:11:42, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/02/17 10:11:42, 10] smbd/process.c:run_events(299) run_events: No events