thr3ads.net - samba - [Samba] samba log - mac osx - console output

If this information is useful, please help other people find it:
Share via:
Michael H. Warfield
2011-Sep-18 23:13 UTC
[Samba] samba log - mac osx - console output - hacking evidence?

On Sun, 2011-09-18 at 16:52 -0400, Jennifer Buxton wrote:
> Dear Samba Support,
1) This is not a support E-Mail address.  This E-Mail address is for
reporting security vulnerabilities in the Samba software.  It is not for
support.

2) For support issues, you may wish to take your question to the
samba at samba.org list, where I have redirected this reply.

3) At first glace, looking at the logs you provided, I see no evidence
at all that you have "been hacked" or have even been connected to at
all.

The logs do show that the same server is running and those logs show the
normal startup and shutdown of the nmbd name server and the smbd session
servers to provide sharing service.

Your configuration file does show you offering a share in a Public
folder in your home directory and a Public share under mdsp.  The both
indicate that "guest" is allowed to connect, which is probably not the
most secure configuration.  But I'm guessing that's Apples default setup
for users that are added to a system plus a system wide public share.  I
don't know.  I don't use Macs.  But nothing looks malicious in there at
all.
> I have a simple question regarding your product. My macbook pro
> console log for samba while running mac osx snow leopard shows data
> that appears to indicate that my computer has been connected via this
> software to share files. I have never used any file sharing software
> nor did I know what samba was prior to discovering these logs though I
> have other reasons to believe that I may have been hacked. I have
> contacted Apple support and they did not have any information for me
> not knowing about samba at all.
> Can you please take a quick look at the data pasted below and confirm
> if this indicates without a doubt that my computer had been connected
> via the samba file sharing software? Does the presence of this data in
> my console log indicate that samba is the only reason for it to appear
> or could this data have been created by software other than samba? If
> I had never heard of samba much less ever used it or any other file
> sharing then how did this data get in my log files? Is there any data
> within the logs or in any other related folder or file which would
> provide information about the identity of the computer which was
> connected such as a username, a password or an IP address? I have a
> copy of the entire hard drive in case there are other files that I may
> need to examine in order to get to the bottom of this.
The fact that IP addresses and user names are NOT showing up in that log
is telling you nobody has connected.
> I have pasted data below taken from logs and also from a file called
> smb.shares also found on my hard drive.
> 
> Thank you in advance for your time in responding to these very
> important questions.
> 
> Jennifer Dever Buxton
> 
> 443-988-3248
> 
> -----------------------
> 1. The data below is the output from a terminal command
> -----------------------
> 
> Jennifer-Devers-MacBook-Pro:~ MACBOOKPRO$ net lookup users
> [2011/06/21 01:13:18, 0, pid=213]
/SourceCache/samba/samba-235.5/samba/source/utils/net_lookup.c:net_lookup_host(57)
>   Didn't find users#20
> 
> 
> -----------------------
> 2. the data below all came from console logs
> -----------------------
> 
> log.nmbd:
> 
>   Description:	Windows file sharing nmbd log
>   Size:	13 KB
>   Last Modified:	6/8/11 5:50 PM
>   Location:	/var/log/samba/log.nmbd
>   Recent Contents:	...
> [2011/06/04 06:58:08, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/04 06:58:08, 0, pid=93]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(190)
>   create_subnets: No local interfaces !
> [2011/06/04 06:58:08, 0, pid=93]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(191)
>   create_subnets: Waiting for an interface to appear ...
> [2011/06/04 07:04:07, 0, pid=93]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
>   *****
Normal startup messages from nmbd.
> Samba name server MACBOOKPRO-00E5 is now a local master browser for
workgroup WORKGROUP on subnet 192.168.1.9
Same. 
  > *****
> [2011/06/04 07:06:37, 0, pid=93]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:reload_interfaces(233)
>   reload_interfaces: No subnets to listen to. Waiting..
> [2011/06/06 10:11:33, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/06 10:11:33, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(190)
>   create_subnets: No local interfaces !
> [2011/06/06 10:11:33, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(191)
>   create_subnets: Waiting for an interface to appear ...
> [2011/06/06 10:17:35, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
>   *****
> Samba name server MACBOOKPRO-00E5 is now a local master browser for
workgroup WORKGROUP on subnet 192.168.1.4  
Same...  The machine is trying to set up a Windows style sharing network
and is telling you that it has become the local browsing master.
Perfectly normal.
> *****
> [2011/06/06 10:41:19, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:terminate(52)
>   Got SIGTERM: going down...
> [2011/06/06 10:41:19, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/libsmb/nmblib.c:send_udp(793)
>   Packet send failed to 192.168.1.255(138) ERRNO=Can't assign requested
address
> [2011/06/06 10:41:19, 0, pid=189]
/SourceCache/samba/samba-235.5/samba/source/libsmb/nmblib.c:send_udp(793)
>   Packet send failed to 192.168.1.255(138) ERRNO=Can't assign requested
address
> [2011/06/06 11:05:30, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/06 11:05:30, 0, pid=176]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(190)
>   create_subnets: No local interfaces !
> [2011/06/06 11:05:30, 0, pid=176]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(191)
>   create_subnets: Waiting for an interface to appear ...
> [2011/06/06 11:11:26, 0, pid=176]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
>   *****
>   
>   Samba name server MACBOOKPRO-00E5 is now a local master browser for
workgroup WORKGROUP on subnet 192.168.1.4
>   
>   *****
> [2011/06/06 11:26:45, 0, pid=176]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:terminate(52)
>   Got SIGTERM: going down...
> [2011/06/08 16:53:14, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/08 16:53:14, 0, pid=169]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(190)
>   create_subnets: No local interfaces !
> [2011/06/08 16:53:14, 0, pid=169]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(191)
>   create_subnets: Waiting for an interface to appear ...
> [2011/06/08 17:00:28, 0, pid=169]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
>   *****
>   
>   Samba name server MACBOOKPRO-00E5 is now a local master browser for
workgroup WORKGROUP on subnet 192.168.1.2
>   
>   *****
> [2011/06/08 17:18:03, 0, pid=169]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:terminate(52)
>   Got SIGTERM: going down...
> [2011/06/08 17:29:44, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/08 17:29:45, 0, pid=179]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(190)
>   create_subnets: No local interfaces !
> [2011/06/08 17:29:45, 0, pid=179]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_subnetdb.c:create_subnets(191)
>   create_subnets: Waiting for an interface to appear ...
> [2011/06/08 17:35:39, 0, pid=179]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
>   *****
>   
>   Samba name server MACBOOKPRO-00E5 is now a local master browser for
workgroup WORKGROUP on subnet 192.168.1.2
>   
>   *****
> [2011/06/08 17:50:09, 0, pid=179]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:reload_interfaces(233)
>   reload_interfaces: No subnets to listen to. Waiting..
Yeah, enough of that.  Nothing to see there.
> log.smbd:
> Description:	Windows file sharing smbd log
>   Size:	26 KB
>   Last Modified:	6/8/11 5:51 PM
>   Location:	/var/log/samba/log.smbd
>   Recent Contents:	...
> [2011/06/08 02:06:11, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/08 02:06:11, 0, pid=456]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/08 02:06:11, 0, pid=456]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/08 16:22:02, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/08 16:22:02, 0, pid=178]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/08 16:22:02, 0, pid=178]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=19 errno=2
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_user_auth_and_session_key(580)
>   dsDoDirNodeAuthOnRecordType gave -14091 [eDSAuthMethodNotSupported]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(387)
>   opendirectory_user_auth_and_session_key gave -14091
[eDSAuthMethodNotSupported]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_auth_user(235)
>   dsDoNodeAuth gave -14090 [eDSAuthFailed]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(397)
>   opendirectory_auth_user gave -14090 [eDSAuthFailed]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=26 errno=2
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(406)
>   opendirectory_user_session_key gave -14090 [eDSAuthFailed]
> [2011/06/08 16:22:03, 0, pid=180]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_opendirectory_ntlm_password_check(602)
>   opendirectory_smb_pwd_check_ntlmv1 gave -14090 [eDSAuthFailed]
> [2011/06/08 17:51:45, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/08 17:51:46, 0, pid=270]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/08 17:51:46, 0, pid=270]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=19 errno=2
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_user_auth_and_session_key(580)
>   dsDoDirNodeAuthOnRecordType gave -14091 [eDSAuthMethodNotSupported]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(387)
>   opendirectory_user_auth_and_session_key gave -14091
[eDSAuthMethodNotSupported]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_auth_user(235)
>   dsDoNodeAuth gave -14090 [eDSAuthFailed]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(397)
>   opendirectory_auth_user gave -14090 [eDSAuthFailed]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=26 errno=2
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(406)
>   opendirectory_user_session_key gave -14090 [eDSAuthFailed]
> [2011/06/08 17:51:46, 0, pid=272]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_opendirectory_ntlm_password_check(602)
>   opendirectory_smb_pwd_check_ntlmv1 gave -14090 [eDSAuthFailed]
> 
> 
> log.smbd:
> 
>   Description:	Windows file sharing smbd log
>   Size:	31 KB
>   Last Modified:	6/20/11 6:44 AM
>   Location:	/var/log/samba/log.smbd
>   Recent Contents:	...
> [2011/06/16 09:10:54, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/16 09:10:54, 0, pid=262]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/16 09:10:54, 0, pid=262]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/18 21:35:08, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/18 21:35:09, 0, pid=165]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/18 21:35:09, 0, pid=165]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=19 errno=2
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_user_auth_and_session_key(580)
>   dsDoDirNodeAuthOnRecordType gave -14091 [eDSAuthMethodNotSupported]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(387)
>   opendirectory_user_auth_and_session_key gave -14091
[eDSAuthMethodNotSupported]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_auth_user(235)
>   dsDoNodeAuth gave -14090 [eDSAuthFailed]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(397)
>   opendirectory_auth_user gave -14090 [eDSAuthFailed]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=26 errno=2
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(406)
>   opendirectory_user_session_key gave -14090 [eDSAuthFailed]
> [2011/06/18 21:35:09, 0, pid=167]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_opendirectory_ntlm_password_check(602)
>   opendirectory_smb_pwd_check_ntlmv1 gave -14090 [eDSAuthFailed]
> [2011/06/20 06:44:06, 0]
/SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925)
>   smbd version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/06/20 06:44:06, 0, pid=205]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985)
>   opendirectory_sam_searchname[/Config/CIFSServer] gave -14136
[eDSRecordNotFound]
> [2011/06/20 06:44:06, 0, pid=205]
/SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150)
>   secrets_fetch_domain_sid:opendirectory_query_domain_sid gave -14136
[eDSRecordNotFound]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=19 errno=2
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_user_auth_and_session_key(580)
>   dsDoDirNodeAuthOnRecordType gave -14091 [eDSAuthMethodNotSupported]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(387)
>   opendirectory_user_auth_and_session_key gave -14091
[eDSAuthMethodNotSupported]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_auth_user(235)
>   dsDoNodeAuth gave -14090 [eDSAuthFailed]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(397)
>   opendirectory_auth_user gave -14090 [eDSAuthFailed]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:get_opendirectory_authenticator(247)
>   failed to read DomainAdmin credentials, err=67 fd=26 errno=2
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_smb_pwd_check_ntlmv1(406)
>   opendirectory_user_session_key gave -14090 [eDSAuthFailed]
> [2011/06/20 06:44:07, 0, pid=207]
/SourceCache/samba/samba-235.5/samba/source/auth/auth_odsam.c:opendirectory_opendirectory_ntlm_password_check(602)
>   opendirectory_smb_pwd_check_ntlmv1 gave -14090 [eDSAuthFailed]
> 
> 
> 
> ------------------------------
> 
> 
> [2011/07/20 09:49:23, 0]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:main(709)
>   Netbios nameserver version 3.0.28a-apple started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2011/07/20 09:49:23, 0, pid=3741]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd_workgroupdb.c:dump_workgroups(282)
>   dump_workgroups()
>    dump workgroup on subnet     192.168.1.3: netmask=  255.255.255.0:
>   	WORKGROUP(1) current master browser = UNKNOWN
>   		MACBOOKPRO-00E5 40819a03 (Jen Dever's MacBook Pro)
> [2011/07/20 09:49:24, 0, pid=3741]
/SourceCache/samba/samba-235.5/samba/source/nmbd/nmbd.c:terminate(52)
>   Got SIGTERM: going down...

These are all normal startup and shutdown messages.  They are there in
case someone is using Samba and something goes wrong.
> --------------------------------
> 3. this data below comes from a file called samba.shares
> --------------------------------
> 
> 
> #
> # Configuration options for smbd(8), nmbd(8) and winbindd(8).
> #
> # This file is automatically generated, DO NOT EDIT!
> #
> 
> [Jenny's Public Folder]
> 	comment = Jenny's Public Folder
> 	path = /Users/Jennifer/Public
> 	available = yes
> 	guest ok = yes
> 	create mask = 644
> 	directory mask = 755
> 	read only = no
So you are sharing a Windows file sharing share "Jenny's Public
Folder"
from /Users/Jennifer/Public.
> [MDSP's Public Folder]
> 	comment = MDSP's Public Folder
> 	path = /Users/mdsp/Public
> 	available = yes
> 	guest ok = yes
> 	create mask = 644
> 	directory mask = 755
> 	read only = no
Same.  This time the share is "MDSP's Public Folder" and the
directory
is /Users/mdsp/Public.
> [global]
That's all simply how your computer is configured and I would guess
Apple Mac OS X set it up that way for you.  If you don't want Samba
running or you don't want to have those shares present, consult your
Apple documentation.  They set it up that way.
> --------------------
IAC, I see no evidence anyone or anything has ever connected to any of
those shares.

Regards,
Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20110918/1c4b116b/attachment.pgp>
Seemingly Similar Threads

Search for more seemingly similar threads
samba - Sep 2011 - samba log - mac osx - console output - hacking evidence?

[Samba] samba log - mac osx - console output - hacking evidence?

Seemingly Similar Threads

Wisdom of the Ancients
