Ticket #277: log.smbd.zonker.192.168.46.19

File log.smbd.zonker.192.168.46.19, 206.7 KB (added by Neil Waldhauer, 4 years ago)

server log during delete attempt

Line 
1[2016/12/15 15:45:45.922000,  6] param/loadparm.c:7586(lp_file_list_changed)
2  lp_file_list_changed()
3  file H:\MPTN\ETC/samba/smb.conf -> H:\MPTN\ETC/samba/smb.conf  last mod_time: Thu Dec 15 15:45:18 2016
4 
5[2016/12/15 15:45:45.922000,  4] auth/user_util.c:361(map_username)
6  Scanning username map H:\MPTN\ETC\samba\private\smbusermap
7[2016/12/15 15:45:45.922000, 10] auth/user_util.c:195(user_in_list)
8  user_in_list: checking user zonker in list
9[2016/12/15 15:45:45.922000, 10] auth/user_util.c:200(user_in_list)
10  user_in_list: checking user |zonker| against |Administrator|
11[2016/12/15 15:45:45.922000,  8] auth/user_util.c:434(map_username)
12  The user 'zonker' has no mapping. Skip it next time.
13[2016/12/15 15:45:45.922000,  5] auth/auth_util.c:111(make_user_info_map)
14  Mapping user [BEACH2]\[zonker] from workstation [SERBOPEEP]
15[2016/12/15 15:45:45.922000,  5] auth/auth_util.c:133(make_user_info_map)
16  Mapped domain from [BEACH2] to [FOBOPEEP] for user [zonker] from workstation [SERBOPEEP]
17[2016/12/15 15:45:45.922000,  5] auth/user_info.c:59(make_user_info)
18  attempting to make a user_info for zonker (zonker)
19[2016/12/15 15:45:45.922000,  5] auth/user_info.c:70(make_user_info)
20  making strings for zonker's user_info struct
21[2016/12/15 15:45:45.922000,  5] auth/user_info.c:87(make_user_info)
22  making blobs for zonker's user_info struct
23[2016/12/15 15:45:45.922000, 10] auth/user_info.c:123(make_user_info)
24  made a user_info for zonker (zonker)
25[2016/12/15 15:45:45.922000,  3] auth/auth.c:219(check_ntlm_password)
26  check_ntlm_password:  Checking password for unmapped user [BEACH2]\[zonker]@[SERBOPEEP] with the new password interface
27[2016/12/15 15:45:45.922000,  3] auth/auth.c:222(check_ntlm_password)
28  check_ntlm_password:  mapped user is: [FOBOPEEP]\[zonker]@[SERBOPEEP]
29[2016/12/15 15:45:45.922000, 10] auth/auth.c:231(check_ntlm_password)
30  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
31[2016/12/15 15:45:45.922000, 10] auth/auth.c:233(check_ntlm_password)
32  challenge is:
33[2016/12/15 15:45:45.922000,  5] ../lib/util/util.c:415(dump_data)
34  [0000] E2 FF 8C 3C A3 69 8B F9                            âÿŒ<£i‹ù
35[2016/12/15 15:45:45.922000, 10] auth/auth_builtin.c:44(check_guest_security)
36  Check auth for: [zonker]
37[2016/12/15 15:45:45.922000, 10] auth/auth.c:259(check_ntlm_password)
38  check_ntlm_password: guest had nothing to say
39[2016/12/15 15:45:45.922000, 10] auth/auth_sam.c:75(auth_samstrict_auth)
40  Check auth for: [zonker]
41[2016/12/15 15:45:45.922000,  8] lib/util.c:1521(is_myname)
42  is_myname("FOBOPEEP") returns 1
43[2016/12/15 15:45:45.922000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
44  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
45[2016/12/15 15:45:45.922000,  4] smbd/uid.c:460(push_conn_ctx)
46  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
47[2016/12/15 15:45:45.922000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
48  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
49[2016/12/15 15:45:45.924000,  5] ../libcli/security/security_token.c:53(security_token_debug)
50  Security token: (NULL)
51[2016/12/15 15:45:45.924000,  5] auth/token_util.c:527(debug_unix_user_token)
52  UNIX token of user 0
53  Primary group is 0 and contains 0 supplementary groups
54[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
55  pdb_set_username: setting username zonker, was
56[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
57  pdb_set_domain: setting domain SHOWBOPEEP, was
58[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
59  pdb_set_nt_username: setting nt username , was
60[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
61  pdb_set_full_name: setting full name zonker, was
62[2016/12/15 15:45:45.924000,  4] lib/substitute.c:527(automount_server)
63  Home server: fobopeep
64[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
65  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
66[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
67  pdb_set_dir_drive: setting dir drive , was NULL
68[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
69  pdb_set_logon_script: setting logon script , was
70[2016/12/15 15:45:45.924000,  4] lib/substitute.c:527(automount_server)
71  Home server: fobopeep
72[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
73  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
74[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
75  pdb_set_workstations: setting workstations , was
76[2016/12/15 15:45:45.924000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
77  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
78[2016/12/15 15:45:45.924000,  4] smbd/uid.c:460(push_conn_ctx)
79  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
80[2016/12/15 15:45:45.924000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
81  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
82[2016/12/15 15:45:45.924000,  5] ../libcli/security/security_token.c:53(security_token_debug)
83  Security token: (NULL)
84[2016/12/15 15:45:45.924000,  5] auth/token_util.c:527(debug_unix_user_token)
85  UNIX token of user 0
86  Primary group is 0 and contains 0 supplementary groups
87[2016/12/15 15:45:45.924000, 10] passdb/account_pol.c:339(account_policy_get)
88  account_policy_get: name: password history, val: 0
89[2016/12/15 15:45:45.924000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
90  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
91[2016/12/15 15:45:45.924000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
92  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
93[2016/12/15 15:45:45.924000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
94  pdb_set_user_sid_from_rid:
95        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
96[2016/12/15 15:45:45.924000,  5] lib/username.c:171(Get_Pwnam_alloc)
97  Finding user zonker
98[2016/12/15 15:45:45.924000,  5] lib/username.c:116(Get_Pwnam_internals)
99  Trying _Get_Pwnam(), username as lowercase is zonker
100[2016/12/15 15:45:45.924000,  5] lib/username.c:149(Get_Pwnam_internals)
101  Get_Pwnam_internals did find user [zonker]!
102[2016/12/15 15:45:45.924000,  5] passdb/lookup_sid.c:1384(gid_to_sid)
103  gid_to_sid: winbind failed to find a sid for gid 4294967295
104[2016/12/15 15:45:45.924000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
105  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
106[2016/12/15 15:45:45.924000,  4] smbd/uid.c:460(push_conn_ctx)
107  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
108[2016/12/15 15:45:45.924000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
109  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
110[2016/12/15 15:45:45.924000,  5] ../libcli/security/security_token.c:53(security_token_debug)
111  Security token: (NULL)
112[2016/12/15 15:45:45.924000,  5] auth/token_util.c:527(debug_unix_user_token)
113  UNIX token of user 0
114  Primary group is 0 and contains 0 supplementary groups
115[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
116  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
117[2016/12/15 15:45:45.926000, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid)
118  LEGACY: gid 4294967295 -> sid S-1-22-2-4294967295
119[2016/12/15 15:45:45.926000,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
120  Forcing Primary Group to 'Domain Users' for zonker
121[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
122  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
123[2016/12/15 15:45:45.926000,  4] smbd/uid.c:460(push_conn_ctx)
124  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
125[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
126  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
127[2016/12/15 15:45:45.926000,  5] ../libcli/security/security_token.c:53(security_token_debug)
128  Security token: (NULL)
129[2016/12/15 15:45:45.926000,  5] auth/token_util.c:527(debug_unix_user_token)
130  UNIX token of user 0
131  Primary group is 0 and contains 0 supplementary groups
132[2016/12/15 15:45:45.926000, 10] passdb/account_pol.c:339(account_policy_get)
133  account_policy_get: name: password history, val: 0
134[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
135  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
136[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
137  pdb_set_username: setting username zonker, was
138[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
139  pdb_set_domain: setting domain SHOWBOPEEP, was
140[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
141  pdb_set_nt_username: setting nt username , was
142[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
143  pdb_set_full_name: setting full name zonker, was
144[2016/12/15 15:45:45.926000,  4] lib/substitute.c:527(automount_server)
145  Home server: fobopeep
146[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
147  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
148[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
149  pdb_set_dir_drive: setting dir drive , was NULL
150[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
151  pdb_set_logon_script: setting logon script , was
152[2016/12/15 15:45:45.926000,  4] lib/substitute.c:527(automount_server)
153  Home server: fobopeep
154[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
155  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
156[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
157  pdb_set_workstations: setting workstations , was
158[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
159  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
160[2016/12/15 15:45:45.926000,  4] smbd/uid.c:460(push_conn_ctx)
161  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
162[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
163  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
164[2016/12/15 15:45:45.926000,  5] ../libcli/security/security_token.c:53(security_token_debug)
165  Security token: (NULL)
166[2016/12/15 15:45:45.926000,  5] auth/token_util.c:527(debug_unix_user_token)
167  UNIX token of user 0
168  Primary group is 0 and contains 0 supplementary groups
169[2016/12/15 15:45:45.926000, 10] passdb/account_pol.c:339(account_policy_get)
170  account_policy_get: name: password history, val: 0
171[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
172  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
173[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
174  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
175[2016/12/15 15:45:45.926000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
176  pdb_set_user_sid_from_rid:
177        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
178[2016/12/15 15:45:45.926000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
179  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-513
180[2016/12/15 15:45:45.926000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
181  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
182[2016/12/15 15:45:45.926000,  4] ../libcli/auth/ntlm_check.c:404(ntlm_password_check)
183  ntlm_password_check: Checking NT MD4 password
184[2016/12/15 15:45:45.926000,  4] auth/check_samsec.c:183(sam_account_ok)
185  sam_account_ok: Checking SMB password for user zonker
186[2016/12/15 15:45:45.928000,  5] auth/check_samsec.c:165(logon_hours_ok)
187  logon_hours_ok: user zonker allowed to logon at this time (Thu Dec 15 23:45:45 2016
188  )
189[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
190  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
191[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
192  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
193[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
194  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
195[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
196  Security token: (NULL)
197[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
198  UNIX token of user 0
199  Primary group is 0 and contains 0 supplementary groups
200[2016/12/15 15:45:45.928000,  5] lib/username.c:171(Get_Pwnam_alloc)
201  Finding user zonker
202[2016/12/15 15:45:45.928000,  5] lib/username.c:116(Get_Pwnam_internals)
203  Trying _Get_Pwnam(), username as lowercase is zonker
204[2016/12/15 15:45:45.928000,  5] lib/username.c:149(Get_Pwnam_internals)
205  Get_Pwnam_internals did find user [zonker]!
206[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
207  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
208[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
209  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
210[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
211  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
212[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
213  Security token: (NULL)
214[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
215  UNIX token of user 0
216  Primary group is 0 and contains 0 supplementary groups
217[2016/12/15 15:45:45.928000, 10] passdb/account_pol.c:339(account_policy_get)
218  account_policy_get: name: minimum password age, val: 0
219[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
220  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
221[2016/12/15 15:45:45.928000,  5] lib/username.c:171(Get_Pwnam_alloc)
222  Finding user zonker
223[2016/12/15 15:45:45.928000,  5] lib/username.c:116(Get_Pwnam_internals)
224  Trying _Get_Pwnam(), username as lowercase is zonker
225[2016/12/15 15:45:45.928000,  5] lib/username.c:149(Get_Pwnam_internals)
226  Get_Pwnam_internals did find user [zonker]!
227[2016/12/15 15:45:45.928000, 10] lib/system_smbd.c:180(sys_getgrouplist)
228  sys_getgrouplist: user [zonker]
229[2016/12/15 15:45:45.928000,  5] auth/server_info_sam.c:120(make_server_info_sam)
230  make_server_info_sam: made server info for user zonker -> zonker
231[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
232  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
233[2016/12/15 15:45:45.928000,  3] auth/auth.c:268(check_ntlm_password)
234  check_ntlm_password: sam authentication for user [zonker] succeeded
235[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
236  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
237[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
238  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
239[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
240  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
241[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
242  Security token: (NULL)
243[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
244  UNIX token of user 0
245  Primary group is 0 and contains 0 supplementary groups
246[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
247  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
248[2016/12/15 15:45:45.928000,  5] auth/auth.c:296(check_ntlm_password)
249  check_ntlm_password:  PAM Account for user [zonker] succeeded
250[2016/12/15 15:45:45.928000,  2] auth/auth.c:309(check_ntlm_password)
251  check_ntlm_password:  authentication for user [zonker] -> [zonker] -> [zonker] succeeded
252[2016/12/15 15:45:45.928000, 10] auth/token_util.c:223(create_local_nt_token_from_info3)
253  Create local NT token for zonker
254[2016/12/15 15:45:45.928000, 10] passdb/lookup_sid.c:1628(sid_to_gid)
255  winbind failed to find a gid for sid S-1-5-32-544
256[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
257  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
258[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
259  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
260[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
261  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
262[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
263  Security token: (NULL)
264[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
265  UNIX token of user 0
266  Primary group is 0 and contains 0 supplementary groups
267[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
268  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
269[2016/12/15 15:45:45.928000, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid)
270  LEGACY: mapping failed for sid S-1-5-32-544
271[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
272  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
273[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
274  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
275[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
276  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
277[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
278  Security token: (NULL)
279[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
280  UNIX token of user 0
281  Primary group is 0 and contains 0 supplementary groups
282[2016/12/15 15:45:45.928000,  3] auth/token_util.c:438(finalize_local_nt_token)
283  Failed to fetch domain sid for BEACH2
284[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
285  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
286[2016/12/15 15:45:45.928000, 10] passdb/lookup_sid.c:1628(sid_to_gid)
287  winbind failed to find a gid for sid S-1-5-32-545
288[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
289  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
290[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
291  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
292[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
293  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
294[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
295  Security token: (NULL)
296[2016/12/15 15:45:45.928000,  5] auth/token_util.c:527(debug_unix_user_token)
297  UNIX token of user 0
298  Primary group is 0 and contains 0 supplementary groups
299[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
300  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
301[2016/12/15 15:45:45.928000, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid)
302  LEGACY: mapping failed for sid S-1-5-32-545
303[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
304  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
305[2016/12/15 15:45:45.928000,  4] smbd/uid.c:460(push_conn_ctx)
306  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
307[2016/12/15 15:45:45.928000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
308  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
309[2016/12/15 15:45:45.928000,  5] ../libcli/security/security_token.c:53(security_token_debug)
310  Security token: (NULL)
311[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
312  UNIX token of user 0
313  Primary group is 0 and contains 0 supplementary groups
314[2016/12/15 15:45:45.930000,  3] auth/token_util.c:469(finalize_local_nt_token)
315  Failed to fetch domain sid for BEACH2
316[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
317  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
318[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
319  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
320[2016/12/15 15:45:45.930000,  4] smbd/uid.c:460(push_conn_ctx)
321  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
322[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
323  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
324[2016/12/15 15:45:45.930000,  5] ../libcli/security/security_token.c:53(security_token_debug)
325  Security token: (NULL)
326[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
327  UNIX token of user 0
328  Primary group is 0 and contains 0 supplementary groups
329[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
330  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
331[2016/12/15 15:45:45.930000,  4] lib/privileges.c:97(get_privileges)
332  get_privileges: No privileges assigned to SID [S-1-5-21-2949345672-4033095365-296295443-1001]
333[2016/12/15 15:45:45.930000,  4] lib/privileges.c:97(get_privileges)
334  get_privileges: No privileges assigned to SID [S-1-5-21-2949345672-4033095365-296295443-513]
335[2016/12/15 15:45:45.930000,  4] lib/privileges.c:97(get_privileges)
336  get_privileges: No privileges assigned to SID [S-1-22-2-4294967295]
337[2016/12/15 15:45:45.930000,  5] lib/privileges.c:175(get_privileges_for_sids)
338  get_privileges_for_sids: sid = S-1-1-0
339  Privilege set: 0x0
340[2016/12/15 15:45:45.930000,  4] lib/privileges.c:97(get_privileges)
341  get_privileges: No privileges assigned to SID [S-1-5-2]
342[2016/12/15 15:45:45.930000,  4] lib/privileges.c:97(get_privileges)
343  get_privileges: No privileges assigned to SID [S-1-5-11]
344[2016/12/15 15:45:45.930000, 10] passdb/lookup_sid.c:1468(sids_to_unix_ids)
345  wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE
346[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
347  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
348[2016/12/15 15:45:45.930000,  4] smbd/uid.c:460(push_conn_ctx)
349  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
350[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
351  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
352[2016/12/15 15:45:45.930000,  5] ../libcli/security/security_token.c:53(security_token_debug)
353  Security token: (NULL)
354[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
355  UNIX token of user 0
356  Primary group is 0 and contains 0 supplementary groups
357[2016/12/15 15:45:45.930000,  5] passdb/pdb_interface.c:1606(lookup_global_sam_rid)
358  lookup_global_sam_rid: looking up RID 1001.
359[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
360  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
361[2016/12/15 15:45:45.930000,  4] smbd/uid.c:460(push_conn_ctx)
362  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
363[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
364  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
365[2016/12/15 15:45:45.930000,  5] ../libcli/security/security_token.c:53(security_token_debug)
366  Security token: (NULL)
367[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
368  UNIX token of user 0
369  Primary group is 0 and contains 0 supplementary groups
370[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
371  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
372[2016/12/15 15:45:45.930000,  4] smbd/uid.c:460(push_conn_ctx)
373  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
374[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
375  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
376[2016/12/15 15:45:45.930000,  5] ../libcli/security/security_token.c:53(security_token_debug)
377  Security token: (NULL)
378[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
379  UNIX token of user 0
380  Primary group is 0 and contains 0 supplementary groups
381[2016/12/15 15:45:45.930000, 10] passdb/account_pol.c:339(account_policy_get)
382  account_policy_get: name: password history, val: 0
383[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
384  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
385[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
386  pdb_set_username: setting username zonker, was
387[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
388  pdb_set_domain: setting domain SHOWBOPEEP, was
389[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
390  pdb_set_nt_username: setting nt username , was
391[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
392  pdb_set_full_name: setting full name zonker, was
393[2016/12/15 15:45:45.930000,  4] lib/substitute.c:527(automount_server)
394  Home server: fobopeep
395[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
396  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
397[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
398  pdb_set_dir_drive: setting dir drive , was NULL
399[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
400  pdb_set_logon_script: setting logon script , was
401[2016/12/15 15:45:45.930000,  4] lib/substitute.c:527(automount_server)
402  Home server: fobopeep
403[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
404  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
405[2016/12/15 15:45:45.930000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
406  pdb_set_workstations: setting workstations , was
407[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
408  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
409[2016/12/15 15:45:45.930000,  4] smbd/uid.c:460(push_conn_ctx)
410  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
411[2016/12/15 15:45:45.930000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
412  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
413[2016/12/15 15:45:45.930000,  5] ../libcli/security/security_token.c:53(security_token_debug)
414  Security token: (NULL)
415[2016/12/15 15:45:45.930000,  5] auth/token_util.c:527(debug_unix_user_token)
416  UNIX token of user 0
417  Primary group is 0 and contains 0 supplementary groups
418[2016/12/15 15:45:45.932000, 10] passdb/account_pol.c:339(account_policy_get)
419  account_policy_get: name: password history, val: 0
420[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
421  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
422[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
423  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
424[2016/12/15 15:45:45.932000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
425  pdb_set_user_sid_from_rid:
426        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
427[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
428  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-513
429[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
430  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
431[2016/12/15 15:45:45.932000,  5] lib/username.c:171(Get_Pwnam_alloc)
432  Finding user zonker
433[2016/12/15 15:45:45.932000,  5] lib/username.c:116(Get_Pwnam_internals)
434  Trying _Get_Pwnam(), username as lowercase is zonker
435[2016/12/15 15:45:45.932000,  5] lib/username.c:149(Get_Pwnam_internals)
436  Get_Pwnam_internals did find user [zonker]!
437[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
438  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
439[2016/12/15 15:45:45.932000,  5] passdb/lookup_sid.c:1269(legacy_sid_to_gid)
440  LEGACY: sid S-1-5-21-2949345672-4033095365-296295443-1001 is a User, expected a group
441[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
442  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
443[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
444  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
445[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
446  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
447[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
448  Security token: (NULL)
449[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
450  UNIX token of user 0
451  Primary group is 0 and contains 0 supplementary groups
452[2016/12/15 15:45:45.932000,  5] passdb/pdb_interface.c:1606(lookup_global_sam_rid)
453  lookup_global_sam_rid: looking up RID 1001.
454[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
455  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
456[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
457  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
458[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
459  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
460[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
461  Security token: (NULL)
462[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
463  UNIX token of user 0
464  Primary group is 0 and contains 0 supplementary groups
465[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
466  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
467[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
468  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
469[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
470  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
471[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
472  Security token: (NULL)
473[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
474  UNIX token of user 0
475  Primary group is 0 and contains 0 supplementary groups
476[2016/12/15 15:45:45.932000, 10] passdb/account_pol.c:339(account_policy_get)
477  account_policy_get: name: password history, val: 0
478[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
479  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
480[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
481  pdb_set_username: setting username zonker, was
482[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
483  pdb_set_domain: setting domain SHOWBOPEEP, was
484[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
485  pdb_set_nt_username: setting nt username , was
486[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
487  pdb_set_full_name: setting full name zonker, was
488[2016/12/15 15:45:45.932000,  4] lib/substitute.c:527(automount_server)
489  Home server: fobopeep
490[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
491  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
492[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
493  pdb_set_dir_drive: setting dir drive , was NULL
494[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
495  pdb_set_logon_script: setting logon script , was
496[2016/12/15 15:45:45.932000,  4] lib/substitute.c:527(automount_server)
497  Home server: fobopeep
498[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
499  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
500[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
501  pdb_set_workstations: setting workstations , was
502[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
503  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
504[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
505  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
506[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
507  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
508[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
509  Security token: (NULL)
510[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
511  UNIX token of user 0
512  Primary group is 0 and contains 0 supplementary groups
513[2016/12/15 15:45:45.932000, 10] passdb/account_pol.c:339(account_policy_get)
514  account_policy_get: name: password history, val: 0
515[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
516  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
517[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
518  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
519[2016/12/15 15:45:45.932000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
520  pdb_set_user_sid_from_rid:
521        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
522[2016/12/15 15:45:45.932000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
523  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-513
524[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
525  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
526[2016/12/15 15:45:45.932000,  5] lib/username.c:171(Get_Pwnam_alloc)
527  Finding user zonker
528[2016/12/15 15:45:45.932000,  5] lib/username.c:116(Get_Pwnam_internals)
529  Trying _Get_Pwnam(), username as lowercase is zonker
530[2016/12/15 15:45:45.932000,  5] lib/username.c:149(Get_Pwnam_internals)
531  Get_Pwnam_internals did find user [zonker]!
532[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
533  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
534[2016/12/15 15:45:45.932000, 10] passdb/lookup_sid.c:1223(legacy_sid_to_uid)
535  LEGACY: sid S-1-5-21-2949345672-4033095365-296295443-1001 -> uid 4294967295
536[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
537  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
538[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
539  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
540[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
541  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
542[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
543  Security token: (NULL)
544[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
545  UNIX token of user 0
546  Primary group is 0 and contains 0 supplementary groups
547[2016/12/15 15:45:45.932000,  5] passdb/pdb_interface.c:1606(lookup_global_sam_rid)
548  lookup_global_sam_rid: looking up RID 513.
549[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
550  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
551[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
552  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
553[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
554  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
555[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
556  Security token: (NULL)
557[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
558  UNIX token of user 0
559  Primary group is 0 and contains 0 supplementary groups
560[2016/12/15 15:45:45.932000,  5] passdb/pdb_tdb.c:614(tdbsam_getsampwrid)
561  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
562[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
563  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
564[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
565  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
566[2016/12/15 15:45:45.932000, 10] passdb/lookup_sid.c:1285(legacy_sid_to_gid)
567  LEGACY: sid S-1-5-21-2949345672-4033095365-296295443-513 -> gid 513
568[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
569  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
570[2016/12/15 15:45:45.932000,  4] smbd/uid.c:460(push_conn_ctx)
571  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
572[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
573  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
574[2016/12/15 15:45:45.932000,  5] ../libcli/security/security_token.c:53(security_token_debug)
575  Security token: (NULL)
576[2016/12/15 15:45:45.932000,  5] auth/token_util.c:527(debug_unix_user_token)
577  UNIX token of user 0
578  Primary group is 0 and contains 0 supplementary groups
579[2016/12/15 15:45:45.932000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
580  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
581[2016/12/15 15:45:45.932000, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid)
582  LEGACY: mapping failed for sid S-1-1-0
583[2016/12/15 15:45:45.932000, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid)
584  LEGACY: mapping failed for sid S-1-1-0
585[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
586  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
587[2016/12/15 15:45:45.934000,  4] smbd/uid.c:460(push_conn_ctx)
588  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
589[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
590  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
591[2016/12/15 15:45:45.934000,  5] ../libcli/security/security_token.c:53(security_token_debug)
592  Security token: (NULL)
593[2016/12/15 15:45:45.934000,  5] auth/token_util.c:527(debug_unix_user_token)
594  UNIX token of user 0
595  Primary group is 0 and contains 0 supplementary groups
596[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
597  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
598[2016/12/15 15:45:45.934000, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid)
599  LEGACY: mapping failed for sid S-1-5-2
600[2016/12/15 15:45:45.934000, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid)
601  LEGACY: mapping failed for sid S-1-5-2
602[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
603  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
604[2016/12/15 15:45:45.934000,  4] smbd/uid.c:460(push_conn_ctx)
605  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
606[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
607  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
608[2016/12/15 15:45:45.934000,  5] ../libcli/security/security_token.c:53(security_token_debug)
609  Security token: (NULL)
610[2016/12/15 15:45:45.934000,  5] auth/token_util.c:527(debug_unix_user_token)
611  UNIX token of user 0
612  Primary group is 0 and contains 0 supplementary groups
613[2016/12/15 15:45:45.934000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
614  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
615[2016/12/15 15:45:45.934000, 10] passdb/lookup_sid.c:1253(legacy_sid_to_gid)
616  LEGACY: mapping failed for sid S-1-5-11
617[2016/12/15 15:45:45.934000, 10] passdb/lookup_sid.c:1218(legacy_sid_to_uid)
618  LEGACY: mapping failed for sid S-1-5-11
619[2016/12/15 15:45:45.934000, 10] auth/auth_util.c:520(create_local_token)
620  Could not convert SID S-1-22-2-4294967295 to gid, ignoring it
621[2016/12/15 15:45:45.934000, 10] auth/auth_util.c:520(create_local_token)
622  Could not convert SID S-1-1-0 to gid, ignoring it
623[2016/12/15 15:45:45.934000, 10] auth/auth_util.c:520(create_local_token)
624  Could not convert SID S-1-5-2 to gid, ignoring it
625[2016/12/15 15:45:45.934000, 10] auth/auth_util.c:520(create_local_token)
626  Could not convert SID S-1-5-11 to gid, ignoring it
627[2016/12/15 15:45:45.934000, 10] ../libcli/security/security_token.c:63(security_token_debug)
628  Security token SIDs (8):
629    SID[  0]: S-1-5-21-2949345672-4033095365-296295443-1001
630    SID[  1]: S-1-5-21-2949345672-4033095365-296295443-513
631    SID[  2]: S-1-22-2-4294967295
632    SID[  3]: S-1-1-0
633    SID[  4]: S-1-5-2
634    SID[  5]: S-1-5-11
635    SID[  6]: S-1-22-1-4294967295
636    SID[  7]: S-1-22-2-513
637   Privileges (0x               0):
638   Rights (0x               0):
639[2016/12/15 15:45:45.934000, 10] auth/token_util.c:527(debug_unix_user_token)
640  UNIX token of user -1
641  Primary group is -1 and contains 1 supplementary groups
642  Group[  0]: 513
643[2016/12/15 15:45:45.934000, 10] auth/auth_ntlmssp.c:174(auth_ntlmssp_check_password)
644  Got NT session key of length 16
645[2016/12/15 15:45:45.934000, 10] ../libcli/auth/ntlmssp_server.c:418(ntlmssp_server_postauth)
646  ntlmssp_server_auth: Created NTLM2 session key.
647[2016/12/15 15:45:45.934000,  3] ../libcli/auth/ntlmssp_sign.c:535(ntlmssp_sign_init)
648  NTLMSSP Sign/Seal - Initialising with flags:
649[2016/12/15 15:45:45.934000,  3] ../libcli/auth/ntlmssp.c:34(debug_ntlmssp_flags)
650  Got NTLMSSP neg_flags=0x60088215
651    NTLMSSP_NEGOTIATE_UNICODE
652    NTLMSSP_REQUEST_TARGET
653    NTLMSSP_NEGOTIATE_SIGN
654    NTLMSSP_NEGOTIATE_NTLM
655    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
656    NTLMSSP_NEGOTIATE_NTLM2
657    NTLMSSP_NEGOTIATE_128
658    NTLMSSP_NEGOTIATE_KEY_EXCH
659[2016/12/15 15:45:45.934000, 10] smbd/password.c:302(register_existing_vuid)
660  register_existing_vuid: (4294967295,4294967295) zonker zonker SHOWBOPEEP guest=0
661[2016/12/15 15:45:45.934000,  3] smbd/password.c:307(register_existing_vuid)
662  register_existing_vuid: User name: zonker     Real name: zonker
663[2016/12/15 15:45:45.934000,  3] smbd/password.c:317(register_existing_vuid)
664  register_existing_vuid: UNIX uid -1 is UNIX user zonker, and will be vuid 100
665[2016/12/15 15:45:45.934000, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
666  Locking key 49442F3135382F313030
667[2016/12/15 15:45:45.934000, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
668  Allocated locked data 0x200d2430
669[2016/12/15 15:45:45.934000, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
670  Unlocking key 49442F3135382F313030
671[2016/12/15 15:45:45.934000,  7] param/loadparm.c:9968(lp_servicenumber)
672  lp_servicenumber: couldn't find zonker
673[2016/12/15 15:45:45.934000,  5] lib/username.c:171(Get_Pwnam_alloc)
674  Finding user zonker
675[2016/12/15 15:45:45.934000,  5] lib/username.c:116(Get_Pwnam_internals)
676  Trying _Get_Pwnam(), username as lowercase is zonker
677[2016/12/15 15:45:45.934000,  5] lib/username.c:149(Get_Pwnam_internals)
678  Get_Pwnam_internals did find user [zonker]!
679[2016/12/15 15:45:45.934000,  3] smbd/password.c:247(register_homes_share)
680  Adding homes service for user 'zonker' using home directory: '/nonexistent'
681[2016/12/15 15:45:45.934000,  8] param/loadparm.c:6576(add_a_service)
682  add_a_service: Creating snum = 12 for zonker
683[2016/12/15 15:45:45.934000, 10] param/loadparm.c:6623(hash_a_service)
684  hash_a_service: hashing index 12 for service name zonker
685[2016/12/15 15:45:45.934000,  3] param/loadparm.c:6678(lp_add_home)
686  adding home's share [zonker] for user 'zonker' at 'H:/HOME/%u'
687[2016/12/15 15:45:45.936000,  6] param/loadparm.c:7586(lp_file_list_changed)
688  lp_file_list_changed()
689  file H:\MPTN\ETC/samba/smb.conf -> H:\MPTN\ETC/samba/smb.conf  last mod_time: Thu Dec 15 15:45:18 2016
690 
691[2016/12/15 15:45:45.936000,  5] lib/util.c:332(show_msg)
692[2016/12/15 15:45:45.936000,  5] lib/util.c:342(show_msg)
693  size=134
694  smb_com=0x73
695  smb_rcls=0
696  smb_reh=0
697  smb_err=0
698  smb_flg=136
699  smb_flg2=51203
700  smb_tid=0
701  smb_pid=29
702  smb_uid=100
703  smb_mid=3
704  smt_wct=4
705  smb_vwv[ 0]=  255 (0xFF)
706  smb_vwv[ 1]=    0 (0x0)
707  smb_vwv[ 2]=    0 (0x0)
708  smb_vwv[ 3]=    9 (0x9)
709  smb_bcc=91
710[2016/12/15 15:45:45.936000, 10] ../lib/util/util.c:415(dump_data)
711  [0000] A1 07 30 05 A0 03 0A 01   00 4F 00 53 00 2F 00 32   ¡.0. ... .O.S./.2
712  [0010] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
713  [0020] 00 2E 00 36 00 2E 00 32   00 35 00 2D 00 4F 00 53   ...6...2 .5.-.O.S
714  [0030] 00 2F 00 32 00 20 00 76   00 31 00 2E 00 33 00 2E   ./.2. .v .1...3..
715  [0040] 00 30 00 2D 00 39 00 37   00 39 00 00 00 42 00 45   .0.-.9.7 .9...B.E
716  [0050] 00 41 00 43 00 48 00 32   00 00 00                 .A.C.H.2 ...
717[2016/12/15 15:45:45.936000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
718  got smb length of 77
719[2016/12/15 15:45:45.936000,  6] smbd/process.c:1610(process_smb)
720  got message type 0x0 of len 0x4d
721[2016/12/15 15:45:45.936000,  3] smbd/process.c:1612(process_smb)
722  Transaction 3 of length 81 (0 toread)
723[2016/12/15 15:45:45.936000,  5] lib/util.c:332(show_msg)
724[2016/12/15 15:45:45.936000,  5] lib/util.c:342(show_msg)
725  size=77
726  smb_com=0x75
727  smb_rcls=0
728  smb_reh=0
729  smb_err=0
730  smb_flg=8
731  smb_flg2=51201
732  smb_tid=0
733  smb_pid=29
734  smb_uid=100
735  smb_mid=4
736  smt_wct=4
737  smb_vwv[ 0]=  255 (0xFF)
738  smb_vwv[ 1]=    0 (0x0)
739  smb_vwv[ 2]=    8 (0x8)
740  smb_vwv[ 3]=    1 (0x1)
741  smb_bcc=34
742[2016/12/15 15:45:45.936000, 10] ../lib/util/util.c:415(dump_data)
743  [0000] 00 5C 00 5C 00 46 00 4F   00 42 00 4F 00 50 00 45   .\.\.F.O .B.O.P.E
744  [0010] 00 45 00 50 00 5C 00 4A   00 46 00 53 00 00 00 41   .E.P.\.J .F.S...A
745  [0020] 3A 00                                             :.
746[2016/12/15 15:45:45.936000,  3] smbd/process.c:1417(switch_message)
747  switch message SMBtconX (pid 158) conn 0x0
748[2016/12/15 15:45:45.936000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
749  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
750[2016/12/15 15:45:45.936000,  5] ../libcli/security/security_token.c:53(security_token_debug)
751  Security token: (NULL)
752[2016/12/15 15:45:45.936000,  5] auth/token_util.c:527(debug_unix_user_token)
753  UNIX token of user 0
754  Primary group is 0 and contains 0 supplementary groups
755[2016/12/15 15:45:45.936000,  5] smbd/uid.c:400(change_to_root_user)
756  change_to_root_user: now uid=(0,0) gid=(0,0)
757[2016/12/15 15:45:45.936000,  4] smbd/reply.c:794(reply_tcon_and_X)
758  Client requested device type [A:] for share [JFS]
759[2016/12/15 15:45:45.936000,  5] smbd/service.c:1359(make_connection)
760  making a connection to 'normal' service jfs
761[2016/12/15 15:45:45.936000,  3] lib/access.c:338(allow_access)
762  Allowed connection from 192.168.46.19 (192.168.46.19)
763[2016/12/15 15:45:45.936000, 10] smbd/share_access.c:241(user_ok_token)
764  user_ok_token: share JFS is ok for unix user zonker
765[2016/12/15 15:45:45.936000,  5] lib/username.c:171(Get_Pwnam_alloc)
766  Finding user zonker
767[2016/12/15 15:45:45.936000,  5] lib/username.c:116(Get_Pwnam_internals)
768  Trying _Get_Pwnam(), username as lowercase is zonker
769[2016/12/15 15:45:45.936000,  5] lib/username.c:149(Get_Pwnam_internals)
770  Get_Pwnam_internals did find user [zonker]!
771[2016/12/15 15:45:45.936000, 10] smbd/service.c:167(set_conn_connectpath)
772  set_conn_connectpath: service JFS, connectpath = D:/
773[2016/12/15 15:45:45.936000,  3] smbd/service.c:877(make_connection_snum)
774  Connect path is 'D:/' for service [JFS]
775[2016/12/15 15:45:45.936000, 10] ../libcli/security/access_check.c:58(se_map_generic)
776  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
777[2016/12/15 15:45:45.938000, 10] ../libcli/security/access_check.c:178(se_access_check)
778  se_access_check: MAX desired = 0x2000000, granted = 0x101f01ff, remaining = 0x101f01ff
779[2016/12/15 15:45:45.938000,  3] smbd/vfs.c:102(vfs_init_default)
780  Initialising default vfs hooks
781[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
782  vfs_find_backend_entry called for /[Default VFS]/
783[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
784  Successfully added vfs backend '/[Default VFS]/'
785[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
786  vfs_find_backend_entry called for recycle
787[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
788  Successfully added vfs backend 'recycle'
789[2016/12/15 15:45:45.938000, 10] modules/vfs_recycle.c:685(vfs_recycle_init)
790  vfs_recycle: Debug class number of 'recycle': 20
791[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
792  vfs_find_backend_entry called for audit
793[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
794  Successfully added vfs backend 'audit'
795[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
796  vfs_find_backend_entry called for extd_audit
797[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
798  Successfully added vfs backend 'extd_audit'
799[2016/12/15 15:45:45.938000, 10] modules/vfs_extd_audit.c:373(vfs_extd_audit_init)
800  vfs_extd_audit: Debug class number of 'extd_audit': 21
801[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
802  vfs_find_backend_entry called for full_audit
803[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
804  Successfully added vfs backend 'full_audit'
805[2016/12/15 15:45:45.938000, 10] modules/vfs_full_audit.c:2372(vfs_full_audit_init)
806  vfs_full_audit: Debug class number of 'full_audit': 22
807[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
808  vfs_find_backend_entry called for netatalk
809[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
810  Successfully added vfs backend 'netatalk'
811[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
812  vfs_find_backend_entry called for fake_perms
813[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
814  Successfully added vfs backend 'fake_perms'
815[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
816  vfs_find_backend_entry called for default_quota
817[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
818  Successfully added vfs backend 'default_quota'
819[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
820  vfs_find_backend_entry called for readonly
821[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
822  Successfully added vfs backend 'readonly'
823[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
824  vfs_find_backend_entry called for cap
825[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
826  Successfully added vfs backend 'cap'
827[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
828  vfs_find_backend_entry called for expand_msdfs
829[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
830  Successfully added vfs backend 'expand_msdfs'
831[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
832  vfs_find_backend_entry called for shadow_copy
833[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
834  Successfully added vfs backend 'shadow_copy'
835[2016/12/15 15:45:45.938000, 10] modules/vfs_shadow_copy.c:301(vfs_shadow_copy_init)
836  vfs_shadow_copy_init: Debug class number of 'shadow_copy': 23
837[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
838  vfs_find_backend_entry called for shadow_copy2
839[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
840  Successfully added vfs backend 'shadow_copy2'
841[2016/12/15 15:45:45.938000, 10] modules/vfs_shadow_copy2.c:1045(vfs_shadow_copy2_init)
842  vfs_shadow_copy2_init: Debug class number of 'shadow_copy2': 24
843[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
844  vfs_find_backend_entry called for xattr_tdb
845[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
846  Successfully added vfs backend 'xattr_tdb'
847[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
848  vfs_find_backend_entry called for catia
849[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
850  Successfully added vfs backend 'catia'
851[2016/12/15 15:45:45.938000, 10] modules/vfs_catia.c:1045(vfs_catia_init)
852  vfs_catia: Debug class number of 'catia': 25
853[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
854  vfs_find_backend_entry called for streams_xattr
855[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
856  Successfully added vfs backend 'streams_xattr'
857[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
858  vfs_find_backend_entry called for streams_depot
859[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
860  Successfully added vfs backend 'streams_depot'
861[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
862  vfs_find_backend_entry called for readahead
863[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
864  Successfully added vfs backend 'readahead'
865[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
866  vfs_find_backend_entry called for preopen
867[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
868  Successfully added vfs backend 'preopen'
869[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
870  vfs_find_backend_entry called for acl_xattr
871[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
872  Successfully added vfs backend 'acl_xattr'
873[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
874  vfs_find_backend_entry called for acl_tdb
875[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
876  Successfully added vfs backend 'acl_tdb'
877[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
878  vfs_find_backend_entry called for smb_traffic_analyzer
879[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
880  Successfully added vfs backend 'smb_traffic_analyzer'
881[2016/12/15 15:45:45.938000,  3] modules/vfs_smb_traffic_analyzer.c:933(vfs_smb_traffic_analyzer_init)
882  smb_traffic_analyzer_init: Debug class number of'smb_traffic_analyzer': 26
883[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
884  vfs_find_backend_entry called for scannedonly
885[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
886  Successfully added vfs backend 'scannedonly'
887[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
888  vfs_find_backend_entry called for crossrename
889[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
890  Successfully added vfs backend 'crossrename'
891[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
892  vfs_find_backend_entry called for linux_xfs_sgid
893[2016/12/15 15:45:45.938000,  5] smbd/vfs.c:92(smb_register_vfs)
894  Successfully added vfs backend 'linux_xfs_sgid'
895[2016/12/15 15:45:45.938000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
896  vfs_find_backend_entry called for time_audit
897[2016/12/15 15:45:45.940000,  5] smbd/vfs.c:92(smb_register_vfs)
898  Successfully added vfs backend 'time_audit'
899[2016/12/15 15:45:45.940000,  3] smbd/vfs.c:128(vfs_init_custom)
900  Initialising custom vfs hooks from [/[Default VFS]/]
901[2016/12/15 15:45:45.940000, 10] smbd/vfs.c:53(vfs_find_backend_entry)
902  vfs_find_backend_entry called for /[Default VFS]/
903  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
904[2016/12/15 15:45:45.940000,  5] smbd/connection.c:134(claim_connection)
905  claiming [JFS]
906[2016/12/15 15:45:45.940000, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
907  Locking key 9E000000FFFFFFFFB238
908[2016/12/15 15:45:45.940000, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
909  Allocated locked data 0x200d0b30
910[2016/12/15 15:45:45.940000, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
911  Unlocking key 9E000000FFFFFFFFB238
912[2016/12/15 15:45:45.940000, 10] smbd/service.c:167(set_conn_connectpath)
913  set_conn_connectpath: service JFS, connectpath = D:/
914[2016/12/15 15:45:45.940000, 10] smbd/share_access.c:241(user_ok_token)
915  user_ok_token: share JFS is ok for unix user zonker
916[2016/12/15 15:45:45.940000,  3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
917  string_to_sid: SID root is not in a valid format
918[2016/12/15 15:45:45.940000, 10] passdb/lookup_sid.c:76(lookup_name)
919  lookup_name: FOBOPEEP\root => domain=[FOBOPEEP], name=[root]
920[2016/12/15 15:45:45.940000, 10] passdb/lookup_sid.c:77(lookup_name)
921  lookup_name: flags = 0x073
922[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
923  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
924[2016/12/15 15:45:45.940000,  4] smbd/uid.c:460(push_conn_ctx)
925  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
926[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
927  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
928[2016/12/15 15:45:45.940000,  5] ../libcli/security/security_token.c:53(security_token_debug)
929  Security token: (NULL)
930[2016/12/15 15:45:45.940000,  5] auth/token_util.c:527(debug_unix_user_token)
931  UNIX token of user 0
932  Primary group is 0 and contains 0 supplementary groups
933[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
934  pdb_set_username: setting username root, was
935[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
936  pdb_set_domain: setting domain SHOWBOPEEP, was
937[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
938  pdb_set_nt_username: setting nt username , was
939[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
940  pdb_set_full_name: setting full name root, was
941[2016/12/15 15:45:45.940000,  4] lib/substitute.c:527(automount_server)
942  Home server: fobopeep
943[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
944  pdb_set_homedir: setting home dir \\fobopeep\root, was
945[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
946  pdb_set_dir_drive: setting dir drive , was NULL
947[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
948  pdb_set_logon_script: setting logon script , was
949[2016/12/15 15:45:45.940000,  4] lib/substitute.c:527(automount_server)
950  Home server: fobopeep
951[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
952  pdb_set_profile_path: setting profile path \\fobopeep\root\profile, was
953[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
954  pdb_set_workstations: setting workstations , was
955[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
956  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
957[2016/12/15 15:45:45.940000,  4] smbd/uid.c:460(push_conn_ctx)
958  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
959[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
960  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
961[2016/12/15 15:45:45.940000,  5] ../libcli/security/security_token.c:53(security_token_debug)
962  Security token: (NULL)
963[2016/12/15 15:45:45.940000,  5] auth/token_util.c:527(debug_unix_user_token)
964  UNIX token of user 0
965  Primary group is 0 and contains 0 supplementary groups
966[2016/12/15 15:45:45.940000, 10] passdb/account_pol.c:339(account_policy_get)
967  account_policy_get: name: password history, val: 0
968[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
969  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
970[2016/12/15 15:45:45.940000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
971  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1000
972[2016/12/15 15:45:45.940000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
973  pdb_set_user_sid_from_rid:
974        setting user sid S-1-5-21-2949345672-4033095365-296295443-1000 from rid 1000
975[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
976  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
977[2016/12/15 15:45:45.940000,  4] smbd/uid.c:460(push_conn_ctx)
978  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
979[2016/12/15 15:45:45.940000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
980  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
981[2016/12/15 15:45:45.940000,  5] ../libcli/security/security_token.c:53(security_token_debug)
982  Security token: (NULL)
983[2016/12/15 15:45:45.940000,  5] auth/token_util.c:527(debug_unix_user_token)
984  UNIX token of user 0
985  Primary group is 0 and contains 0 supplementary groups
986[2016/12/15 15:45:45.940000, 10] passdb/account_pol.c:339(account_policy_get)
987  account_policy_get: name: maximum password age, val: -1
988[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
989  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
990[2016/12/15 15:45:45.942000,  5] lib/username.c:171(Get_Pwnam_alloc)
991  Finding user root
992[2016/12/15 15:45:45.942000,  5] lib/username.c:116(Get_Pwnam_internals)
993  Trying _Get_Pwnam(), username as lowercase is root
994[2016/12/15 15:45:45.942000,  5] lib/username.c:149(Get_Pwnam_internals)
995  Get_Pwnam_internals did find user [root]!
996[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
997  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
998[2016/12/15 15:45:45.942000,  4] smbd/uid.c:460(push_conn_ctx)
999  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1000[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1001  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1002[2016/12/15 15:45:45.942000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1003  Security token: (NULL)
1004[2016/12/15 15:45:45.942000,  5] auth/token_util.c:527(debug_unix_user_token)
1005  UNIX token of user 0
1006  Primary group is 0 and contains 0 supplementary groups
1007[2016/12/15 15:45:45.942000, 10] passdb/account_pol.c:339(account_policy_get)
1008  account_policy_get: name: password history, val: 0
1009[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1010  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1011[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1012  pdb_set_username: setting username root, was
1013[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1014  pdb_set_domain: setting domain SHOWBOPEEP, was
1015[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1016  pdb_set_nt_username: setting nt username , was
1017[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1018  pdb_set_full_name: setting full name root, was
1019[2016/12/15 15:45:45.942000,  4] lib/substitute.c:527(automount_server)
1020  Home server: fobopeep
1021[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1022  pdb_set_homedir: setting home dir \\fobopeep\root, was
1023[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1024  pdb_set_dir_drive: setting dir drive , was NULL
1025[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1026  pdb_set_logon_script: setting logon script , was
1027[2016/12/15 15:45:45.942000,  4] lib/substitute.c:527(automount_server)
1028  Home server: fobopeep
1029[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1030  pdb_set_profile_path: setting profile path \\fobopeep\root\profile, was
1031[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1032  pdb_set_workstations: setting workstations , was
1033[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1034  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1035[2016/12/15 15:45:45.942000,  4] smbd/uid.c:460(push_conn_ctx)
1036  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1037[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1038  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1039[2016/12/15 15:45:45.942000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1040  Security token: (NULL)
1041[2016/12/15 15:45:45.942000,  5] auth/token_util.c:527(debug_unix_user_token)
1042  UNIX token of user 0
1043  Primary group is 0 and contains 0 supplementary groups
1044[2016/12/15 15:45:45.942000, 10] passdb/account_pol.c:339(account_policy_get)
1045  account_policy_get: name: password history, val: 0
1046[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1047  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1048[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1049  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1000
1050[2016/12/15 15:45:45.942000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1051  pdb_set_user_sid_from_rid:
1052        setting user sid S-1-5-21-2949345672-4033095365-296295443-1000 from rid 1000
1053[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
1054  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-512
1055[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1056  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
1057[2016/12/15 15:45:45.942000,  3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
1058  string_to_sid: SID zonker is not in a valid format
1059[2016/12/15 15:45:45.942000, 10] passdb/lookup_sid.c:76(lookup_name)
1060  lookup_name: FOBOPEEP\zonker => domain=[FOBOPEEP], name=[zonker]
1061[2016/12/15 15:45:45.942000, 10] passdb/lookup_sid.c:77(lookup_name)
1062  lookup_name: flags = 0x073
1063[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1064  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
1065[2016/12/15 15:45:45.942000,  4] smbd/uid.c:460(push_conn_ctx)
1066  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
1067[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1068  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
1069[2016/12/15 15:45:45.942000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1070  Security token: (NULL)
1071[2016/12/15 15:45:45.942000,  5] auth/token_util.c:527(debug_unix_user_token)
1072  UNIX token of user 0
1073  Primary group is 0 and contains 0 supplementary groups
1074[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1075  pdb_set_username: setting username zonker, was
1076[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1077  pdb_set_domain: setting domain SHOWBOPEEP, was
1078[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1079  pdb_set_nt_username: setting nt username , was
1080[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1081  pdb_set_full_name: setting full name zonker, was
1082[2016/12/15 15:45:45.942000,  4] lib/substitute.c:527(automount_server)
1083  Home server: fobopeep
1084[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1085  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
1086[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1087  pdb_set_dir_drive: setting dir drive , was NULL
1088[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1089  pdb_set_logon_script: setting logon script , was
1090[2016/12/15 15:45:45.942000,  4] lib/substitute.c:527(automount_server)
1091  Home server: fobopeep
1092[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1093  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
1094[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1095  pdb_set_workstations: setting workstations , was
1096[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1097  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1098[2016/12/15 15:45:45.942000,  4] smbd/uid.c:460(push_conn_ctx)
1099  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1100[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1101  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1102[2016/12/15 15:45:45.942000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1103  Security token: (NULL)
1104[2016/12/15 15:45:45.942000,  5] auth/token_util.c:527(debug_unix_user_token)
1105  UNIX token of user 0
1106  Primary group is 0 and contains 0 supplementary groups
1107[2016/12/15 15:45:45.942000, 10] passdb/account_pol.c:339(account_policy_get)
1108  account_policy_get: name: password history, val: 0
1109[2016/12/15 15:45:45.942000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1110  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1111[2016/12/15 15:45:45.942000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1112  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
1113[2016/12/15 15:45:45.942000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1114  pdb_set_user_sid_from_rid:
1115        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
1116[2016/12/15 15:45:45.942000,  5] lib/username.c:171(Get_Pwnam_alloc)
1117  Finding user zonker
1118[2016/12/15 15:45:45.942000,  5] lib/username.c:116(Get_Pwnam_internals)
1119  Trying _Get_Pwnam(), username as lowercase is zonker
1120[2016/12/15 15:45:45.942000,  5] lib/username.c:149(Get_Pwnam_internals)
1121  Get_Pwnam_internals did find user [zonker]!
1122[2016/12/15 15:45:45.944000,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
1123  Forcing Primary Group to 'Domain Users' for zonker
1124[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1125  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1126[2016/12/15 15:45:45.944000,  4] smbd/uid.c:460(push_conn_ctx)
1127  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1128[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1129  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1130[2016/12/15 15:45:45.944000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1131  Security token: (NULL)
1132[2016/12/15 15:45:45.944000,  5] auth/token_util.c:527(debug_unix_user_token)
1133  UNIX token of user 0
1134  Primary group is 0 and contains 0 supplementary groups
1135[2016/12/15 15:45:45.944000, 10] passdb/account_pol.c:339(account_policy_get)
1136  account_policy_get: name: password history, val: 0
1137[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1138  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1139[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1140  pdb_set_username: setting username zonker, was
1141[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1142  pdb_set_domain: setting domain SHOWBOPEEP, was
1143[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1144  pdb_set_nt_username: setting nt username , was
1145[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1146  pdb_set_full_name: setting full name zonker, was
1147[2016/12/15 15:45:45.944000,  4] lib/substitute.c:527(automount_server)
1148  Home server: fobopeep
1149[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1150  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
1151[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1152  pdb_set_dir_drive: setting dir drive , was NULL
1153[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1154  pdb_set_logon_script: setting logon script , was
1155[2016/12/15 15:45:45.944000,  4] lib/substitute.c:527(automount_server)
1156  Home server: fobopeep
1157[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1158  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
1159[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1160  pdb_set_workstations: setting workstations , was
1161[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1162  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1163[2016/12/15 15:45:45.944000,  4] smbd/uid.c:460(push_conn_ctx)
1164  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1165[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1166  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1167[2016/12/15 15:45:45.944000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1168  Security token: (NULL)
1169[2016/12/15 15:45:45.944000,  5] auth/token_util.c:527(debug_unix_user_token)
1170  UNIX token of user 0
1171  Primary group is 0 and contains 0 supplementary groups
1172[2016/12/15 15:45:45.944000, 10] passdb/account_pol.c:339(account_policy_get)
1173  account_policy_get: name: password history, val: 0
1174[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1175  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1176[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1177  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
1178[2016/12/15 15:45:45.944000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1179  pdb_set_user_sid_from_rid:
1180        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
1181[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
1182  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-513
1183[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1184  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
1185[2016/12/15 15:45:45.944000,  3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
1186  string_to_sid: SID root is not in a valid format
1187[2016/12/15 15:45:45.944000, 10] passdb/lookup_sid.c:76(lookup_name)
1188  lookup_name: FOBOPEEP\root => domain=[FOBOPEEP], name=[root]
1189[2016/12/15 15:45:45.944000, 10] passdb/lookup_sid.c:77(lookup_name)
1190  lookup_name: flags = 0x073
1191[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1192  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
1193[2016/12/15 15:45:45.944000,  4] smbd/uid.c:460(push_conn_ctx)
1194  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
1195[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1196  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
1197[2016/12/15 15:45:45.944000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1198  Security token: (NULL)
1199[2016/12/15 15:45:45.944000,  5] auth/token_util.c:527(debug_unix_user_token)
1200  UNIX token of user 0
1201  Primary group is 0 and contains 0 supplementary groups
1202[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1203  pdb_set_username: setting username root, was
1204[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1205  pdb_set_domain: setting domain SHOWBOPEEP, was
1206[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1207  pdb_set_nt_username: setting nt username , was
1208[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1209  pdb_set_full_name: setting full name root, was
1210[2016/12/15 15:45:45.944000,  4] lib/substitute.c:527(automount_server)
1211  Home server: fobopeep
1212[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1213  pdb_set_homedir: setting home dir \\fobopeep\root, was
1214[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1215  pdb_set_dir_drive: setting dir drive , was NULL
1216[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1217  pdb_set_logon_script: setting logon script , was
1218[2016/12/15 15:45:45.944000,  4] lib/substitute.c:527(automount_server)
1219  Home server: fobopeep
1220[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1221  pdb_set_profile_path: setting profile path \\fobopeep\root\profile, was
1222[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1223  pdb_set_workstations: setting workstations , was
1224[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1225  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1226[2016/12/15 15:45:45.944000,  4] smbd/uid.c:460(push_conn_ctx)
1227  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1228[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1229  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1230[2016/12/15 15:45:45.944000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1231  Security token: (NULL)
1232[2016/12/15 15:45:45.944000,  5] auth/token_util.c:527(debug_unix_user_token)
1233  UNIX token of user 0
1234  Primary group is 0 and contains 0 supplementary groups
1235[2016/12/15 15:45:45.944000, 10] passdb/account_pol.c:339(account_policy_get)
1236  account_policy_get: name: password history, val: 0
1237[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1238  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1239[2016/12/15 15:45:45.944000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1240  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1000
1241[2016/12/15 15:45:45.944000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1242  pdb_set_user_sid_from_rid:
1243        setting user sid S-1-5-21-2949345672-4033095365-296295443-1000 from rid 1000
1244[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1245  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1246[2016/12/15 15:45:45.944000,  4] smbd/uid.c:460(push_conn_ctx)
1247  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1248[2016/12/15 15:45:45.944000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1249  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1250[2016/12/15 15:45:45.946000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1251  Security token: (NULL)
1252[2016/12/15 15:45:45.946000,  5] auth/token_util.c:527(debug_unix_user_token)
1253  UNIX token of user 0
1254  Primary group is 0 and contains 0 supplementary groups
1255[2016/12/15 15:45:45.946000, 10] passdb/account_pol.c:339(account_policy_get)
1256  account_policy_get: name: maximum password age, val: -1
1257[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1258  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1259[2016/12/15 15:45:45.946000,  5] lib/username.c:171(Get_Pwnam_alloc)
1260  Finding user root
1261[2016/12/15 15:45:45.946000,  5] lib/username.c:116(Get_Pwnam_internals)
1262  Trying _Get_Pwnam(), username as lowercase is root
1263[2016/12/15 15:45:45.946000,  5] lib/username.c:149(Get_Pwnam_internals)
1264  Get_Pwnam_internals did find user [root]!
1265[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1266  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1267[2016/12/15 15:45:45.946000,  4] smbd/uid.c:460(push_conn_ctx)
1268  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1269[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1270  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1271[2016/12/15 15:45:45.946000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1272  Security token: (NULL)
1273[2016/12/15 15:45:45.946000,  5] auth/token_util.c:527(debug_unix_user_token)
1274  UNIX token of user 0
1275  Primary group is 0 and contains 0 supplementary groups
1276[2016/12/15 15:45:45.946000, 10] passdb/account_pol.c:339(account_policy_get)
1277  account_policy_get: name: password history, val: 0
1278[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1279  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1280[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1281  pdb_set_username: setting username root, was
1282[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1283  pdb_set_domain: setting domain SHOWBOPEEP, was
1284[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1285  pdb_set_nt_username: setting nt username , was
1286[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1287  pdb_set_full_name: setting full name root, was
1288[2016/12/15 15:45:45.946000,  4] lib/substitute.c:527(automount_server)
1289  Home server: fobopeep
1290[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1291  pdb_set_homedir: setting home dir \\fobopeep\root, was
1292[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1293  pdb_set_dir_drive: setting dir drive , was NULL
1294[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1295  pdb_set_logon_script: setting logon script , was
1296[2016/12/15 15:45:45.946000,  4] lib/substitute.c:527(automount_server)
1297  Home server: fobopeep
1298[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1299  pdb_set_profile_path: setting profile path \\fobopeep\root\profile, was
1300[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1301  pdb_set_workstations: setting workstations , was
1302[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1303  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1304[2016/12/15 15:45:45.946000,  4] smbd/uid.c:460(push_conn_ctx)
1305  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1306[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1307  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1308[2016/12/15 15:45:45.946000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1309  Security token: (NULL)
1310[2016/12/15 15:45:45.946000,  5] auth/token_util.c:527(debug_unix_user_token)
1311  UNIX token of user 0
1312  Primary group is 0 and contains 0 supplementary groups
1313[2016/12/15 15:45:45.946000, 10] passdb/account_pol.c:339(account_policy_get)
1314  account_policy_get: name: password history, val: 0
1315[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1316  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1317[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1318  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1000
1319[2016/12/15 15:45:45.946000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1320  pdb_set_user_sid_from_rid:
1321        setting user sid S-1-5-21-2949345672-4033095365-296295443-1000 from rid 1000
1322[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
1323  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-512
1324[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1325  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
1326[2016/12/15 15:45:45.946000,  3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
1327  string_to_sid: SID zonker is not in a valid format
1328[2016/12/15 15:45:45.946000, 10] passdb/lookup_sid.c:76(lookup_name)
1329  lookup_name: FOBOPEEP\zonker => domain=[FOBOPEEP], name=[zonker]
1330[2016/12/15 15:45:45.946000, 10] passdb/lookup_sid.c:77(lookup_name)
1331  lookup_name: flags = 0x073
1332[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1333  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
1334[2016/12/15 15:45:45.946000,  4] smbd/uid.c:460(push_conn_ctx)
1335  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
1336[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1337  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
1338[2016/12/15 15:45:45.946000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1339  Security token: (NULL)
1340[2016/12/15 15:45:45.946000,  5] auth/token_util.c:527(debug_unix_user_token)
1341  UNIX token of user 0
1342  Primary group is 0 and contains 0 supplementary groups
1343[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1344  pdb_set_username: setting username zonker, was
1345[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1346  pdb_set_domain: setting domain SHOWBOPEEP, was
1347[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1348  pdb_set_nt_username: setting nt username , was
1349[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1350  pdb_set_full_name: setting full name zonker, was
1351[2016/12/15 15:45:45.946000,  4] lib/substitute.c:527(automount_server)
1352  Home server: fobopeep
1353[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1354  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
1355[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1356  pdb_set_dir_drive: setting dir drive , was NULL
1357[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1358  pdb_set_logon_script: setting logon script , was
1359[2016/12/15 15:45:45.946000,  4] lib/substitute.c:527(automount_server)
1360  Home server: fobopeep
1361[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1362  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
1363[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1364  pdb_set_workstations: setting workstations , was
1365[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1366  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1367[2016/12/15 15:45:45.946000,  4] smbd/uid.c:460(push_conn_ctx)
1368  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1369[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1370  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1371[2016/12/15 15:45:45.946000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1372  Security token: (NULL)
1373[2016/12/15 15:45:45.946000,  5] auth/token_util.c:527(debug_unix_user_token)
1374  UNIX token of user 0
1375  Primary group is 0 and contains 0 supplementary groups
1376[2016/12/15 15:45:45.946000, 10] passdb/account_pol.c:339(account_policy_get)
1377  account_policy_get: name: password history, val: 0
1378[2016/12/15 15:45:45.946000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1379  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1380[2016/12/15 15:45:45.946000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1381  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
1382[2016/12/15 15:45:45.946000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1383  pdb_set_user_sid_from_rid:
1384        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
1385[2016/12/15 15:45:45.946000,  5] lib/username.c:171(Get_Pwnam_alloc)
1386  Finding user zonker
1387[2016/12/15 15:45:45.946000,  5] lib/username.c:116(Get_Pwnam_internals)
1388  Trying _Get_Pwnam(), username as lowercase is zonker
1389[2016/12/15 15:45:45.946000,  5] lib/username.c:149(Get_Pwnam_internals)
1390  Get_Pwnam_internals did find user [zonker]!
1391[2016/12/15 15:45:45.948000,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
1392  Forcing Primary Group to 'Domain Users' for zonker
1393[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1394  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1395[2016/12/15 15:45:45.948000,  4] smbd/uid.c:460(push_conn_ctx)
1396  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1397[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1398  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1399[2016/12/15 15:45:45.948000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1400  Security token: (NULL)
1401[2016/12/15 15:45:45.948000,  5] auth/token_util.c:527(debug_unix_user_token)
1402  UNIX token of user 0
1403  Primary group is 0 and contains 0 supplementary groups
1404[2016/12/15 15:45:45.948000, 10] passdb/account_pol.c:339(account_policy_get)
1405  account_policy_get: name: password history, val: 0
1406[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1407  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1408[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:576(pdb_set_username)
1409  pdb_set_username: setting username zonker, was
1410[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:599(pdb_set_domain)
1411  pdb_set_domain: setting domain SHOWBOPEEP, was
1412[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:622(pdb_set_nt_username)
1413  pdb_set_nt_username: setting nt username , was
1414[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:645(pdb_set_fullname)
1415  pdb_set_full_name: setting full name zonker, was
1416[2016/12/15 15:45:45.948000,  4] lib/substitute.c:527(automount_server)
1417  Home server: fobopeep
1418[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:738(pdb_set_homedir)
1419  pdb_set_homedir: setting home dir \\fobopeep\zonker, was
1420[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:714(pdb_set_dir_drive)
1421  pdb_set_dir_drive: setting dir drive , was NULL
1422[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:668(pdb_set_logon_script)
1423  pdb_set_logon_script: setting logon script , was
1424[2016/12/15 15:45:45.948000,  4] lib/substitute.c:527(automount_server)
1425  Home server: fobopeep
1426[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:691(pdb_set_profile_path)
1427  pdb_set_profile_path: setting profile path \\fobopeep\zonker\profile, was
1428[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:781(pdb_set_workstations)
1429  pdb_set_workstations: setting workstations , was
1430[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
1431  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
1432[2016/12/15 15:45:45.948000,  4] smbd/uid.c:460(push_conn_ctx)
1433  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
1434[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1435  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
1436[2016/12/15 15:45:45.948000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1437  Security token: (NULL)
1438[2016/12/15 15:45:45.948000,  5] auth/token_util.c:527(debug_unix_user_token)
1439  UNIX token of user 0
1440  Primary group is 0 and contains 0 supplementary groups
1441[2016/12/15 15:45:45.948000, 10] passdb/account_pol.c:339(account_policy_get)
1442  account_policy_get: name: password history, val: 0
1443[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1444  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
1445[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
1446  pdb_set_user_sid: setting user sid S-1-5-21-2949345672-4033095365-296295443-1001
1447[2016/12/15 15:45:45.948000, 10] passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid)
1448  pdb_set_user_sid_from_rid:
1449        setting user sid S-1-5-21-2949345672-4033095365-296295443-1001 from rid 1001
1450[2016/12/15 15:45:45.948000, 10] passdb/pdb_get_set.c:563(pdb_set_group_sid)
1451  pdb_set_group_sid: setting group sid S-1-5-21-2949345672-4033095365-296295443-513
1452[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
1453  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
1454[2016/12/15 15:45:45.948000, 10] smbd/share_access.c:286(is_share_read_only_for_token)
1455  is_share_read_only_for_user: share JFS is read-write for unix user zonker
1456[2016/12/15 15:45:45.948000, 10] ../libcli/security/access_check.c:58(se_map_generic)
1457  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
1458[2016/12/15 15:45:45.948000, 10] ../libcli/security/access_check.c:58(se_map_generic)
1459  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
1460[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1461  setting sec ctx (4294967295, 4294967295) - sec_ctx_stack_ndx = 0
1462[2016/12/15 15:45:45.948000,  5] ../libcli/security/security_token.c:63(security_token_debug)
1463  Security token SIDs (8):
1464    SID[  0]: S-1-5-21-2949345672-4033095365-296295443-1001
1465    SID[  1]: S-1-5-21-2949345672-4033095365-296295443-513
1466    SID[  2]: S-1-22-2-4294967295
1467    SID[  3]: S-1-1-0
1468    SID[  4]: S-1-5-2
1469    SID[  5]: S-1-5-11
1470    SID[  6]: S-1-22-1-4294967295
1471    SID[  7]: S-1-22-2-513
1472   Privileges (0x               0):
1473   Rights (0x               0):
1474[2016/12/15 15:45:45.948000,  5] auth/token_util.c:527(debug_unix_user_token)
1475  UNIX token of user -1
1476  Primary group is -1 and contains 1 supplementary groups
1477  Group[  0]: 513
1478[2016/12/15 15:45:45.948000,  1] smbd/sec_ctx.c:83(become_gid)
1479  WARNING: using gid -1 is a security risk
1480[2016/12/15 15:45:45.948000,  1] smbd/sec_ctx.c:58(become_uid)
1481  WARNING: using uid -1 is a security risk
1482[2016/12/15 15:45:45.948000,  5] smbd/uid.c:317(change_to_user_internal)
1483  Impersonated user: uid=(0,0), gid=(0,0)
1484[2016/12/15 15:45:45.948000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1485  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
1486[2016/12/15 15:45:45.948000,  5] ../libcli/security/security_token.c:53(security_token_debug)
1487  Security token: (NULL)
1488[2016/12/15 15:45:45.948000,  5] auth/token_util.c:527(debug_unix_user_token)
1489  UNIX token of user 0
1490  Primary group is 0 and contains 0 supplementary groups
1491[2016/12/15 15:45:45.948000,  5] smbd/uid.c:400(change_to_root_user)
1492  change_to_root_user: now uid=(0,0) gid=(0,0)
1493[2016/12/15 15:45:45.948000, 10] smbd/service.c:167(set_conn_connectpath)
1494  set_conn_connectpath: service JFS, connectpath = D:/
1495[2016/12/15 15:45:45.948000,  1] smbd/service.c:1119(make_connection_snum)
1496  serbopeep (192.168.46.19) connect to service JFS initially as user zonker (uid=0, gid=0) (pid 158)
1497[2016/12/15 15:45:45.950000,  3] smbd/reply.c:871(reply_tcon_and_X)
1498  tconX service=JFS
1499[2016/12/15 15:45:45.950000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
1500  got smb length of 114
1501[2016/12/15 15:45:45.950000,  6] smbd/process.c:1610(process_smb)
1502  got message type 0x0 of len 0x72
1503[2016/12/15 15:45:45.950000,  3] smbd/process.c:1612(process_smb)
1504  Transaction 4 of length 118 (0 toread)
1505[2016/12/15 15:45:45.950000,  5] lib/util.c:332(show_msg)
1506[2016/12/15 15:45:45.950000,  5] lib/util.c:342(show_msg)
1507  size=114
1508  smb_com=0x32
1509  smb_rcls=0
1510  smb_reh=0
1511  smb_err=0
1512  smb_flg=8
1513  smb_flg2=51201
1514  smb_tid=1
1515  smb_pid=29
1516  smb_uid=100
1517  smb_mid=5
1518  smt_wct=15
1519  smb_vwv[ 0]=   46 (0x2E)
1520  smb_vwv[ 1]=    0 (0x0)
1521  smb_vwv[ 2]=   10 (0xA)
1522  smb_vwv[ 3]=16644 (0x4104)
1523  smb_vwv[ 4]=    0 (0x0)
1524  smb_vwv[ 5]=    0 (0x0)
1525  smb_vwv[ 6]=    0 (0x0)
1526  smb_vwv[ 7]=    0 (0x0)
1527  smb_vwv[ 8]=    0 (0x0)
1528  smb_vwv[ 9]=   46 (0x2E)
1529  smb_vwv[10]=   68 (0x44)
1530  smb_vwv[11]=    0 (0x0)
1531  smb_vwv[12]=  114 (0x72)
1532  smb_vwv[13]=    1 (0x1)
1533  smb_vwv[14]=    1 (0x1)
1534  smb_bcc=49
1535[2016/12/15 15:45:45.950000, 10] ../lib/util/util.c:415(dump_data)
1536  [0000] 00 44 20 16 00 56 05 06   00 04 01 00 00 00 00 5C   .D ..V.. .......\
1537  [0010] 00 74 00 65 00 6D 00 70   00 5C 00 66 00 6F 00 62   .t.e.m.p .\.f.o.b
1538  [0020] 00 6F 00 70 00 65 00 65   00 70 00 5C 00 2A 00 00   .o.p.e.e .p.\.*..
1539  [0030] 00                                                .
1540[2016/12/15 15:45:45.950000,  3] smbd/process.c:1417(switch_message)
1541  switch message SMBtrans2 (pid 158) conn 0x200d6790
1542[2016/12/15 15:45:45.950000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
1543  setting sec ctx (4294967295, 4294967295) - sec_ctx_stack_ndx = 0
1544[2016/12/15 15:45:45.950000,  5] ../libcli/security/security_token.c:63(security_token_debug)
1545  Security token SIDs (8):
1546    SID[  0]: S-1-5-21-2949345672-4033095365-296295443-1001
1547    SID[  1]: S-1-5-21-2949345672-4033095365-296295443-513
1548    SID[  2]: S-1-22-2-4294967295
1549    SID[  3]: S-1-1-0
1550    SID[  4]: S-1-5-2
1551    SID[  5]: S-1-5-11
1552    SID[  6]: S-1-22-1-4294967295
1553    SID[  7]: S-1-22-2-513
1554   Privileges (0x               0):
1555   Rights (0x               0):
1556[2016/12/15 15:45:45.950000,  5] auth/token_util.c:527(debug_unix_user_token)
1557  UNIX token of user -1
1558  Primary group is -1 and contains 1 supplementary groups
1559  Group[  0]: 513
1560[2016/12/15 15:45:45.950000,  5] smbd/uid.c:317(change_to_user_internal)
1561  Impersonated user: uid=(0,0), gid=(0,0)
1562[2016/12/15 15:45:45.950000,  4] smbd/vfs.c:784(vfs_ChDir)
1563  vfs_ChDir to D:/
1564[2016/12/15 15:45:45.950000,  3] smbd/trans2.c:2349(call_trans2findfirst)
1565  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16644
1566[2016/12/15 15:45:45.950000,  5] smbd/filename.c:257(unix_convert)
1567  unix_convert called on file "temp/fobopeep/*"
1568[2016/12/15 15:45:45.950000, 10] smbd/statcache.c:244(stat_cache_lookup)
1569  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP/*]
1570[2016/12/15 15:45:45.950000, 10] smbd/statcache.c:244(stat_cache_lookup)
1571  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP]
1572[2016/12/15 15:45:45.950000, 10] smbd/statcache.c:244(stat_cache_lookup)
1573  stat_cache_lookup: lookup failed for name [TEMP]
1574[2016/12/15 15:45:45.950000,  5] smbd/filename.c:416(unix_convert)
1575  unix_convert begin: name = temp/fobopeep/*, dirpath = , start = temp/fobopeep/*
1576[2016/12/15 15:45:45.950000,  5] smbd/filename.c:184(check_parent_exists)
1577  check_parent_exists: name = temp/fobopeep/*, dirpath = temp/fobopeep, start = *
1578[2016/12/15 15:45:45.950000, 10] smbd/mangle_hash2.c:418(is_mangled)
1579  is_mangled * ?
1580[2016/12/15 15:45:45.950000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
1581  is_mangled_component * (len 1) ?
1582[2016/12/15 15:45:45.950000,  5] smbd/filename.c:616(unix_convert)
1583  Wildcard *
1584[2016/12/15 15:45:45.950000,  3] smbd/vfs.c:909(check_reduced_name)
1585  check_reduced_name [temp/fobopeep/*] [D:/]
1586[2016/12/15 15:45:45.950000, 10] smbd/vfs.c:973(check_reduced_name)
1587  check_reduced_name realpath [temp/fobopeep/*] -> [D:/Temp/fobopeep/*]
1588[2016/12/15 15:45:45.950000,  3] smbd/vfs.c:1054(check_reduced_name)
1589  check_reduced_name: temp/fobopeep/* reduced to D:/Temp/fobopeep/*
1590[2016/12/15 15:45:45.952000,  5] smbd/trans2.c:2434(call_trans2findfirst)
1591  dir=temp/fobopeep, mask = *
1592[2016/12/15 15:45:45.952000,  5] smbd/dir.c:442(dptr_create)
1593  dptr_create dir=temp/fobopeep
1594[2016/12/15 15:45:45.952000,  3] smbd/vfs.c:909(check_reduced_name)
1595  check_reduced_name [temp/fobopeep] [D:/]
1596[2016/12/15 15:45:45.952000, 10] smbd/vfs.c:973(check_reduced_name)
1597  check_reduced_name realpath [temp/fobopeep] -> [D:/Temp/fobopeep]
1598[2016/12/15 15:45:45.952000,  3] smbd/vfs.c:1054(check_reduced_name)
1599  check_reduced_name: temp/fobopeep reduced to D:/Temp/fobopeep
1600[2016/12/15 15:45:45.952000,  3] smbd/dir.c:581(dptr_create)
1601  creating new dirptr 256 for path temp/fobopeep, expect_close = 1
1602[2016/12/15 15:45:45.952000,  4] smbd/trans2.c:2502(call_trans2findfirst)
1603  dptr_num is 256, wcard = *, attr = 22
1604[2016/12/15 15:45:45.952000,  8] smbd/trans2.c:2511(call_trans2findfirst)
1605  dirpath=<temp/fobopeep> dontdescend=<>
1606[2016/12/15 15:45:45.952000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
1607  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset 0
1608[2016/12/15 15:45:45.952000,  8] smbd/dosmode.c:645(dos_mode)
1609  dos_mode: temp/fobopeep/.
1610[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1611  unigetxattr : (temp/fobopeep/.:0) user.DOSATTRIB 56
1612[2016/12/15 15:45:45.952000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
1613  get_ea_dos_attribute: temp/fobopeep/. attr = 0x10
1614[2016/12/15 15:45:45.952000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
1615  get_ea_dos_attribute: file temp/fobopeep/. case 3 set btime Wed Dec 14 07:35:50 2016
1616 
1617[2016/12/15 15:45:45.952000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
1618  get_ea_dos_attribute returning (0x10)d
1619[2016/12/15 15:45:45.952000,  8] lib/util.c:1320(is_in_path)
1620  is_in_path: temp/fobopeep/.
1621[2016/12/15 15:45:45.952000,  8] lib/util.c:1344(is_in_path)
1622  is_in_path: match not found
1623[2016/12/15 15:45:45.952000,  8] smbd/dosmode.c:696(dos_mode)
1624  dos_mode returning d
1625[2016/12/15 15:45:45.952000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
1626  fetch_share_mode_unlocked: no share_mode record around (file not open)
1627[2016/12/15 15:45:45.952000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
1628  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/. fname=. (.)
1629[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
1630  smbd_marshall_dir_entry: space_remaining = 16644
1631[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
1632  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
1633[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:374(unilistxattr)
1634  unilistxattr : (temp/fobopeep/.:0) 47
1635[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:239(get_ea_names_from_file)
1636  get_ea_list_from_file: ea_namelist size = 47
1637[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1638  unigetxattr : (temp/fobopeep/.:0) UID 8
1639[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:154(get_ea_value)
1640  get_ea_value: EA UID is of length 8
1641[2016/12/15 15:45:45.952000, 10] ../lib/util/util.c:415(dump_data)
1642  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1643[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1644  get_ea_list_from_file: total_len = 16, UID, val len = 8
1645[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1646  unigetxattr : (temp/fobopeep/.:0) GID 8
1647[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:154(get_ea_value)
1648  get_ea_value: EA GID is of length 8
1649[2016/12/15 15:45:45.952000, 10] ../lib/util/util.c:415(dump_data)
1650  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1651[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1652  get_ea_list_from_file: total_len = 32, GID, val len = 8
1653[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1654  unigetxattr : (temp/fobopeep/.:0) MODE 8
1655[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:154(get_ea_value)
1656  get_ea_value: EA MODE is of length 8
1657[2016/12/15 15:45:45.952000, 10] ../lib/util/util.c:415(dump_data)
1658  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
1659[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1660  get_ea_list_from_file: total_len = 49, MODE, val len = 8
1661[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1662  unigetxattr : (temp/fobopeep/.:0) INO 12
1663[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:154(get_ea_value)
1664  get_ea_value: EA INO is of length 12
1665[2016/12/15 15:45:45.952000, 10] ../lib/util/util.c:415(dump_data)
1666  [0000] FE FF 08 00 25 F6 42 70   B7 7C 40 5B              þÿ..%öBp ·|@[
1667[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1668  get_ea_list_from_file: total_len = 69, INO, val len = 12
1669[2016/12/15 15:45:45.952000,  5] lib/os2helper.c:294(unigetxattr)
1670  unigetxattr : (temp/fobopeep/.:0) RDEV 8
1671[2016/12/15 15:45:45.952000, 10] smbd/trans2.c:154(get_ea_value)
1672  get_ea_value: EA RDEV is of length 8
1673[2016/12/15 15:45:45.954000, 10] ../lib/util/util.c:415(dump_data)
1674  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1675[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1676  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
1677[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:294(unigetxattr)
1678  unigetxattr : (temp/fobopeep/.:0) GEN 8
1679[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:154(get_ea_value)
1680  get_ea_value: EA GEN is of length 8
1681[2016/12/15 15:45:45.954000, 10] ../lib/util/util.c:415(dump_data)
1682  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1683[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1684  get_ea_list_from_file: total_len = 102, GEN, val len = 8
1685[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:294(unigetxattr)
1686  unigetxattr : (temp/fobopeep/.:0) FLAGS 8
1687[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:154(get_ea_value)
1688  get_ea_value: EA FLAGS is of length 8
1689[2016/12/15 15:45:45.954000, 10] ../lib/util/util.c:415(dump_data)
1690  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1691[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1692  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
1693[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:368(get_ea_list_from_file)
1694  get_ea_list_from_file: total_len = 124
1695[2016/12/15 15:45:45.954000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
1696  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset -2147483648
1697[2016/12/15 15:45:45.954000,  8] smbd/dosmode.c:645(dos_mode)
1698  dos_mode: temp/fobopeep/..
1699[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:294(unigetxattr)
1700  unigetxattr : (temp/fobopeep/..:0) user.DOSATTRIB -1
1701[2016/12/15 15:45:45.954000,  8] smbd/dosmode.c:215(dos_mode_from_sbuf)
1702  dos_mode_from_sbuf returning d
1703[2016/12/15 15:45:45.954000,  8] lib/util.c:1320(is_in_path)
1704  is_in_path: temp/fobopeep/..
1705[2016/12/15 15:45:45.954000,  8] lib/util.c:1344(is_in_path)
1706  is_in_path: match not found
1707[2016/12/15 15:45:45.954000,  8] smbd/dosmode.c:696(dos_mode)
1708  dos_mode returning d
1709[2016/12/15 15:45:45.954000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
1710  fetch_share_mode_unlocked: no share_mode record around (file not open)
1711[2016/12/15 15:45:45.954000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
1712  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/.. fname=.. (..)
1713[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
1714  smbd_marshall_dir_entry: space_remaining = 16548
1715[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
1716  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
1717[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:374(unilistxattr)
1718  unilistxattr : (temp/fobopeep/..:0) 11
1719[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:239(get_ea_names_from_file)
1720  get_ea_list_from_file: ea_namelist size = 11
1721[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:294(unigetxattr)
1722  unigetxattr : (temp/fobopeep/..:0) .CLASSINFO -1
1723[2016/12/15 15:45:45.954000,  5] lib/os2helper.c:294(unigetxattr)
1724  unigetxattr : (temp/fobopeep/..:0) .CLASSINFO 569
1725[2016/12/15 15:45:45.954000, 10] smbd/trans2.c:154(get_ea_value)
1726  get_ea_value: EA .CLASSINFO is of length 569
1727[2016/12/15 15:45:45.954000, 10] ../lib/util/util.c:415(dump_data)
1728  [0000] FE FF 35 02 80 00 00 00   24 02 00 00 57 50 46 6F   þÿ5.€... $...WPFo
1729  [0010] 6C 64 65 72 00 8D 01 44   18 10 00 44 18 1E 02 44   lder..D ...D...D
1730  [0020] 18 14 02 00 00 08 00 1E   00 58 46 6F 6C 64 65 72   ........ .XFolder
1731  [0030] 00 02 00 0B 00 04 00 FF   00 00 00 02 00 0C 00 04   .......ÿ ........
1732  [0040] 00 FF 00 00 00 02 00 0D   00 04 00 FF 00 00 00 09   .ÿ...... ...ÿ....
1733  [0050] 00 46 01 57 50 46 6F 6C   64 65 72 00 04 00 6D 0B   .F.WPFol der...m.
1734  [0060] A8 00 43 4C 41 53 43 57   41 75 64 69 6F 53 68 61   š.CLASCW AudioSha
1735  [0070] 64 6F 77 00 43 4C 41 53   4D 4D 41 75 64 69 6F 00   dow.CLAS MMAudio.
1736  [0080] 43 4C 41 53 4D 4D 49 6D   61 67 65 00 43 4C 41 53   CLASMMIm age.CLAS
1737  [0090] 58 57 50 46 6F 6E 74 4F   62 6A 65 63 74 00 43 4C   XWPFontO bject.CL
1738  [00A0] 41 53 58 57 50 54 72 61   73 68 4F 62 6A 65 63 74   ASXWPTra shObject
1739  [00B0] 00 43 4C 41 53 57 50 46   74 70 4F 62 6A 00 43 4C   .CLASWPF tpObj.CL
1740  [00C0] 41 53 57 50 55 72 6C 00   43 4C 41 53 57 50 4F 62   ASWPUrl. CLASWPOb
1741  [00D0] 6A 65 63 74 00 43 4C 41   53 57 50 46 69 6C 65 53   ject.CLA SWPFileS
1742  [00E0] 79 73 74 65 6D 00 43 52   49 54 B4 F7 F7 13 00 00   ystem.CR ITŽ÷÷...
1743  [00F0] 00 00 00 00 00 00 08 00   00 00 00 00 00 00 02 00   ........ ........
1744  [0100] 00 00 04 00 00 00 02 00   00 0E 04 00 73 0B 54 00   ........ ....s.T.
1745  [0110] 04 00 30 00 64 00 50 00   28 80 30 00 03 00 00 00   ..0.d.P. (€0.....
1746  [0120] 00 00 00 00 FF FF FF FF   00 00 00 40 EF FF FF FF   ....ÿÿÿÿ ...@ïÿÿÿ
1747  [0130] EF FF FF FF DD FF FF FF   EF FF FF FF EF FF FF FF   ïÿÿÿÝÿÿÿ ïÿÿÿïÿÿÿ
1748  [0140] DD FF FF FF 00 00 00 40   00 00 00 40 00 00 00 40   Ýÿÿÿ...@ ...@...@
1749  [0150] 00 00 00 00 02 00 00 00   D0 FF FF FF D0 FF FF FF   ........ ÐÿÿÿÐÿÿÿ
1750  [0160] D0 FF FF FF 04 00 74 0B   02 00 FF FF 04 00 71 0B   Ðÿÿÿ..t. ..ÿÿ..q.
1751  [0170] 18 00 FE FF FF FF 01 00   00 00 FE FF FF FF 00 00   ..þÿÿÿ.. ..þÿÿÿ..
1752  [0180] 00 00 00 00 00 00 00 00   00 00 04 00 7A 0B 08 00   ........ ....z...
1753  [0190] 00 00 00 00 00 00 00 00   02 00 7B 0B 04 00 00 00   ........ ..{.....
1754  [01A0] 00 00 09 00 84 00 57 50   4F 62 6A 65 63 74 00 04   ....„.WP Object..
1755  [01B0] 00 0B 00 20 00 67 00 00   00 00 00 00 00 09 00 00   ... .g.. ........
1756  [01C0] 00 80 00 00 00 00 00 00   00 00 00 00 00 03 00 00   .€...... ........
1757  [01D0] 00 02 00 00 00 04 00 0C   00 4A 00 02 00 31 39 37   ........ .J...197
1758  [01E0] 36 36 36 40 31 30 2C 32   33 33 36 36 32 40 31 30   666@10,2 33662@10
1759  [01F0] 2C 32 33 38 37 36 31 40   31 30 2C 32 35 30 31 30   ,238761@ 10,25010
1760  [0200] 34 40 31 30 2C 32 35 30   31 30 34 40 32 30 2C 32   4@10,250 104@20,2
1761  [0210] 30 35 30 32 30 40 31 30   2C 32 34 36 39 38 30 40   05020@10 ,246980@
1762  [0220] 31 30 00 FF FF 04 00 04   00 08 00 FF FF FF FF FF   10.ÿÿ... ...ÿÿÿÿÿ
1763  [0230] FF FF FF 00 00 00 00 00   00                       ÿÿÿ..... .
1764[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1765  get_ea_list_from_file: total_len = 584, .CLASSINFO, val len = 569
1766[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:368(get_ea_list_from_file)
1767  get_ea_list_from_file: total_len = 588
1768[2016/12/15 15:45:45.956000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
1769  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset 3
1770[2016/12/15 15:45:45.956000,  8] smbd/dosmode.c:645(dos_mode)
1771  dos_mode: temp/fobopeep/20160728
1772[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:294(unigetxattr)
1773  unigetxattr : (temp/fobopeep/20160728:0) user.DOSATTRIB 56
1774[2016/12/15 15:45:45.956000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
1775  get_ea_dos_attribute: temp/fobopeep/20160728 attr = 0x10
1776[2016/12/15 15:45:45.956000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
1777  get_ea_dos_attribute: file temp/fobopeep/20160728 case 3 set btime Wed Dec 14 07:35:50 2016
1778 
1779[2016/12/15 15:45:45.956000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
1780  get_ea_dos_attribute returning (0x10)d
1781[2016/12/15 15:45:45.956000,  8] lib/util.c:1320(is_in_path)
1782  is_in_path: temp/fobopeep/20160728
1783[2016/12/15 15:45:45.956000,  8] lib/util.c:1344(is_in_path)
1784  is_in_path: match not found
1785[2016/12/15 15:45:45.956000,  8] smbd/dosmode.c:696(dos_mode)
1786  dos_mode returning d
1787[2016/12/15 15:45:45.956000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
1788  fetch_share_mode_unlocked: no share_mode record around (file not open)
1789[2016/12/15 15:45:45.956000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
1790  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728 fname=20160728 (20160728)
1791[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
1792  smbd_marshall_dir_entry: space_remaining = 16448
1793[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
1794  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
1795[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:374(unilistxattr)
1796  unilistxattr : (temp/fobopeep/20160728:0) 47
1797[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:239(get_ea_names_from_file)
1798  get_ea_list_from_file: ea_namelist size = 47
1799[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:294(unigetxattr)
1800  unigetxattr : (temp/fobopeep/20160728:0) UID 8
1801[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:154(get_ea_value)
1802  get_ea_value: EA UID is of length 8
1803[2016/12/15 15:45:45.956000, 10] ../lib/util/util.c:415(dump_data)
1804  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1805[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1806  get_ea_list_from_file: total_len = 16, UID, val len = 8
1807[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:294(unigetxattr)
1808  unigetxattr : (temp/fobopeep/20160728:0) GID 8
1809[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:154(get_ea_value)
1810  get_ea_value: EA GID is of length 8
1811[2016/12/15 15:45:45.956000, 10] ../lib/util/util.c:415(dump_data)
1812  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1813[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1814  get_ea_list_from_file: total_len = 32, GID, val len = 8
1815[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:294(unigetxattr)
1816  unigetxattr : (temp/fobopeep/20160728:0) MODE 8
1817[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:154(get_ea_value)
1818  get_ea_value: EA MODE is of length 8
1819[2016/12/15 15:45:45.956000, 10] ../lib/util/util.c:415(dump_data)
1820  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
1821[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1822  get_ea_list_from_file: total_len = 49, MODE, val len = 8
1823[2016/12/15 15:45:45.956000,  5] lib/os2helper.c:294(unigetxattr)
1824  unigetxattr : (temp/fobopeep/20160728:0) INO 12
1825[2016/12/15 15:45:45.956000, 10] smbd/trans2.c:154(get_ea_value)
1826  get_ea_value: EA INO is of length 12
1827[2016/12/15 15:45:45.956000, 10] ../lib/util/util.c:415(dump_data)
1828  [0000] FE FF 08 00 F3 ED E7 13   3D 72 48 D4              þÿ..óíç. =rHÔ
1829[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1830  get_ea_list_from_file: total_len = 69, INO, val len = 12
1831[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1832  unigetxattr : (temp/fobopeep/20160728:0) RDEV 8
1833[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1834  get_ea_value: EA RDEV is of length 8
1835[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1836  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1837[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1838  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
1839[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1840  unigetxattr : (temp/fobopeep/20160728:0) GEN 8
1841[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1842  get_ea_value: EA GEN is of length 8
1843[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1844  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1845[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1846  get_ea_list_from_file: total_len = 102, GEN, val len = 8
1847[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1848  unigetxattr : (temp/fobopeep/20160728:0) FLAGS 8
1849[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1850  get_ea_value: EA FLAGS is of length 8
1851[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1852  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1853[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1854  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
1855[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:368(get_ea_list_from_file)
1856  get_ea_list_from_file: total_len = 124
1857[2016/12/15 15:45:45.958000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
1858  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset 4
1859[2016/12/15 15:45:45.958000,  8] smbd/dosmode.c:645(dos_mode)
1860  dos_mode: temp/fobopeep/20161211
1861[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1862  unigetxattr : (temp/fobopeep/20161211:0) user.DOSATTRIB 56
1863[2016/12/15 15:45:45.958000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
1864  get_ea_dos_attribute: temp/fobopeep/20161211 attr = 0x10
1865[2016/12/15 15:45:45.958000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
1866  get_ea_dos_attribute: file temp/fobopeep/20161211 case 3 set btime Wed Dec 14 07:42:32 2016
1867 
1868[2016/12/15 15:45:45.958000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
1869  get_ea_dos_attribute returning (0x10)d
1870[2016/12/15 15:45:45.958000,  8] lib/util.c:1320(is_in_path)
1871  is_in_path: temp/fobopeep/20161211
1872[2016/12/15 15:45:45.958000,  8] lib/util.c:1344(is_in_path)
1873  is_in_path: match not found
1874[2016/12/15 15:45:45.958000,  8] smbd/dosmode.c:696(dos_mode)
1875  dos_mode returning d
1876[2016/12/15 15:45:45.958000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
1877  fetch_share_mode_unlocked: no share_mode record around (file not open)
1878[2016/12/15 15:45:45.958000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
1879  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20161211 fname=20161211 (20161211)
1880[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
1881  smbd_marshall_dir_entry: space_remaining = 16336
1882[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
1883  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
1884[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:374(unilistxattr)
1885  unilistxattr : (temp/fobopeep/20161211:0) 47
1886[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:239(get_ea_names_from_file)
1887  get_ea_list_from_file: ea_namelist size = 47
1888[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1889  unigetxattr : (temp/fobopeep/20161211:0) UID 8
1890[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1891  get_ea_value: EA UID is of length 8
1892[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1893  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1894[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1895  get_ea_list_from_file: total_len = 16, UID, val len = 8
1896[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1897  unigetxattr : (temp/fobopeep/20161211:0) GID 8
1898[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1899  get_ea_value: EA GID is of length 8
1900[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1901  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1902[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1903  get_ea_list_from_file: total_len = 32, GID, val len = 8
1904[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1905  unigetxattr : (temp/fobopeep/20161211:0) MODE 8
1906[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1907  get_ea_value: EA MODE is of length 8
1908[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1909  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
1910[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1911  get_ea_list_from_file: total_len = 49, MODE, val len = 8
1912[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1913  unigetxattr : (temp/fobopeep/20161211:0) INO 12
1914[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1915  get_ea_value: EA INO is of length 12
1916[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1917  [0000] FE FF 08 00 5A D0 4A 11   D4 3C CE 38              þÿ..ZÐJ. Ô<Î8
1918[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1919  get_ea_list_from_file: total_len = 69, INO, val len = 12
1920[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1921  unigetxattr : (temp/fobopeep/20161211:0) RDEV 8
1922[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1923  get_ea_value: EA RDEV is of length 8
1924[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1925  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1926[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1927  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
1928[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1929  unigetxattr : (temp/fobopeep/20161211:0) GEN 8
1930[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1931  get_ea_value: EA GEN is of length 8
1932[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1933  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1934[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1935  get_ea_list_from_file: total_len = 102, GEN, val len = 8
1936[2016/12/15 15:45:45.958000,  5] lib/os2helper.c:294(unigetxattr)
1937  unigetxattr : (temp/fobopeep/20161211:0) FLAGS 8
1938[2016/12/15 15:45:45.958000, 10] smbd/trans2.c:154(get_ea_value)
1939  get_ea_value: EA FLAGS is of length 8
1940[2016/12/15 15:45:45.958000, 10] ../lib/util/util.c:415(dump_data)
1941  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1942[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1943  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
1944[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:368(get_ea_list_from_file)
1945  get_ea_list_from_file: total_len = 124
1946[2016/12/15 15:45:45.960000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
1947  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset 5
1948[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:645(dos_mode)
1949  dos_mode: temp/fobopeep/eCS22
1950[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
1951  unigetxattr : (temp/fobopeep/eCS22:0) user.DOSATTRIB 56
1952[2016/12/15 15:45:45.960000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
1953  get_ea_dos_attribute: temp/fobopeep/eCS22 attr = 0x10
1954[2016/12/15 15:45:45.960000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
1955  get_ea_dos_attribute: file temp/fobopeep/eCS22 case 3 set btime Wed Dec 14 07:47:40 2016
1956 
1957[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
1958  get_ea_dos_attribute returning (0x10)d
1959[2016/12/15 15:45:45.960000,  8] lib/util.c:1320(is_in_path)
1960  is_in_path: temp/fobopeep/eCS22
1961[2016/12/15 15:45:45.960000,  8] lib/util.c:1344(is_in_path)
1962  is_in_path: match not found
1963[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:696(dos_mode)
1964  dos_mode returning d
1965[2016/12/15 15:45:45.960000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
1966  fetch_share_mode_unlocked: no share_mode record around (file not open)
1967[2016/12/15 15:45:45.960000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
1968  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/eCS22 fname=eCS22 (eCS22)
1969[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
1970  smbd_marshall_dir_entry: space_remaining = 16224
1971[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
1972  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
1973[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:374(unilistxattr)
1974  unilistxattr : (temp/fobopeep/eCS22:0) 47
1975[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:239(get_ea_names_from_file)
1976  get_ea_list_from_file: ea_namelist size = 47
1977[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
1978  unigetxattr : (temp/fobopeep/eCS22:0) UID 8
1979[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
1980  get_ea_value: EA UID is of length 8
1981[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
1982  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1983[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1984  get_ea_list_from_file: total_len = 16, UID, val len = 8
1985[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
1986  unigetxattr : (temp/fobopeep/eCS22:0) GID 8
1987[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
1988  get_ea_value: EA GID is of length 8
1989[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
1990  [0000] FE FF 04 00 00 00 00 00                            þÿ......
1991[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
1992  get_ea_list_from_file: total_len = 32, GID, val len = 8
1993[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
1994  unigetxattr : (temp/fobopeep/eCS22:0) MODE 8
1995[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
1996  get_ea_value: EA MODE is of length 8
1997[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
1998  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
1999[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2000  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2001[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
2002  unigetxattr : (temp/fobopeep/eCS22:0) INO 12
2003[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
2004  get_ea_value: EA INO is of length 12
2005[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
2006  [0000] FE FF 08 00 45 57 9F 5A   D9 3B 06 14              þÿ..EWŸZ Ù;..
2007[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2008  get_ea_list_from_file: total_len = 69, INO, val len = 12
2009[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
2010  unigetxattr : (temp/fobopeep/eCS22:0) RDEV 8
2011[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
2012  get_ea_value: EA RDEV is of length 8
2013[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
2014  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2015[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2016  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2017[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
2018  unigetxattr : (temp/fobopeep/eCS22:0) GEN 8
2019[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
2020  get_ea_value: EA GEN is of length 8
2021[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
2022  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2023[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2024  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2025[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
2026  unigetxattr : (temp/fobopeep/eCS22:0) FLAGS 8
2027[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:154(get_ea_value)
2028  get_ea_value: EA FLAGS is of length 8
2029[2016/12/15 15:45:45.960000, 10] ../lib/util/util.c:415(dump_data)
2030  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2031[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2032  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2033[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2034  get_ea_list_from_file: total_len = 124
2035[2016/12/15 15:45:45.960000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2036  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset 6
2037[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:645(dos_mode)
2038  dos_mode: temp/fobopeep/Notes
2039[2016/12/15 15:45:45.960000,  5] lib/os2helper.c:294(unigetxattr)
2040  unigetxattr : (temp/fobopeep/Notes:0) user.DOSATTRIB 56
2041[2016/12/15 15:45:45.960000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2042  get_ea_dos_attribute: temp/fobopeep/Notes attr = 0x10
2043[2016/12/15 15:45:45.960000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2044  get_ea_dos_attribute: file temp/fobopeep/Notes case 3 set btime Wed Dec 14 07:47:58 2016
2045 
2046[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2047  get_ea_dos_attribute returning (0x10)d
2048[2016/12/15 15:45:45.960000,  8] lib/util.c:1320(is_in_path)
2049  is_in_path: temp/fobopeep/Notes
2050[2016/12/15 15:45:45.960000,  8] lib/util.c:1344(is_in_path)
2051  is_in_path: match not found
2052[2016/12/15 15:45:45.960000,  8] smbd/dosmode.c:696(dos_mode)
2053  dos_mode returning d
2054[2016/12/15 15:45:45.960000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2055  fetch_share_mode_unlocked: no share_mode record around (file not open)
2056[2016/12/15 15:45:45.960000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2057  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/Notes fname=Notes (Notes)
2058[2016/12/15 15:45:45.960000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2059  smbd_marshall_dir_entry: space_remaining = 16120
2060[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2061  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2062[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:374(unilistxattr)
2063  unilistxattr : (temp/fobopeep/Notes:0) 47
2064[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2065  get_ea_list_from_file: ea_namelist size = 47
2066[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2067  unigetxattr : (temp/fobopeep/Notes:0) UID 8
2068[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2069  get_ea_value: EA UID is of length 8
2070[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2071  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2072[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2073  get_ea_list_from_file: total_len = 16, UID, val len = 8
2074[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2075  unigetxattr : (temp/fobopeep/Notes:0) GID 8
2076[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2077  get_ea_value: EA GID is of length 8
2078[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2079  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2080[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2081  get_ea_list_from_file: total_len = 32, GID, val len = 8
2082[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2083  unigetxattr : (temp/fobopeep/Notes:0) MODE 8
2084[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2085  get_ea_value: EA MODE is of length 8
2086[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2087  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
2088[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2089  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2090[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2091  unigetxattr : (temp/fobopeep/Notes:0) INO 12
2092[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2093  get_ea_value: EA INO is of length 12
2094[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2095  [0000] FE FF 08 00 B2 7B B2 10   BA DF D0 81              þÿ..²{². ºßЁ
2096[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2097  get_ea_list_from_file: total_len = 69, INO, val len = 12
2098[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2099  unigetxattr : (temp/fobopeep/Notes:0) RDEV 8
2100[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2101  get_ea_value: EA RDEV is of length 8
2102[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2103  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2104[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2105  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2106[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2107  unigetxattr : (temp/fobopeep/Notes:0) GEN 8
2108[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2109  get_ea_value: EA GEN is of length 8
2110[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2111  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2112[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2113  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2114[2016/12/15 15:45:45.962000,  5] lib/os2helper.c:294(unigetxattr)
2115  unigetxattr : (temp/fobopeep/Notes:0) FLAGS 8
2116[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:154(get_ea_value)
2117  get_ea_value: EA FLAGS is of length 8
2118[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2119  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2120[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2121  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2122[2016/12/15 15:45:45.962000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2123  get_ea_list_from_file: total_len = 124
2124[2016/12/15 15:45:45.962000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2125  smbd_dirptr_get_entry: dirptr 0x200c3a60 now at offset -1
2126[2016/12/15 15:45:45.962000,  5] smbd/trans2.c:2568(call_trans2findfirst)
2127  call_trans2findfirst - (2) closing dptr_num 256
2128[2016/12/15 15:45:45.962000,  4] smbd/dir.c:260(dptr_close_internal)
2129  closing dptr key 256
2130[2016/12/15 15:45:45.962000,  9] smbd/trans2.c:992(send_trans2_replies)
2131  t2_rep: params_sent_thistime = 10, data_sent_thistime = 628, useable_space = 131010
2132[2016/12/15 15:45:45.962000,  9] smbd/trans2.c:994(send_trans2_replies)
2133  t2_rep: params_to_send = 10, data_to_send = 628, paramsize = 10, datasize = 628
2134[2016/12/15 15:45:45.962000,  5] lib/util.c:332(show_msg)
2135[2016/12/15 15:45:45.962000,  5] lib/util.c:342(show_msg)
2136  size=696
2137  smb_com=0x32
2138  smb_rcls=0
2139  smb_reh=0
2140  smb_err=0
2141  smb_flg=136
2142  smb_flg2=51203
2143  smb_tid=1
2144  smb_pid=29
2145  smb_uid=100
2146  smb_mid=5
2147  smt_wct=10
2148  smb_vwv[ 0]=   10 (0xA)
2149  smb_vwv[ 1]=  628 (0x274)
2150  smb_vwv[ 2]=    0 (0x0)
2151  smb_vwv[ 3]=   10 (0xA)
2152  smb_vwv[ 4]=   56 (0x38)
2153  smb_vwv[ 5]=    0 (0x0)
2154  smb_vwv[ 6]=  628 (0x274)
2155  smb_vwv[ 7]=   68 (0x44)
2156  smb_vwv[ 8]=    0 (0x0)
2157  smb_vwv[ 9]=    0 (0x0)
2158  smb_bcc=641
2159[2016/12/15 15:45:45.962000, 10] ../lib/util/util.c:415(dump_data)
2160  [0000] 00 FD FF 06 00 01 00 00   00 0C 02 00 00 60 00 00   .ýÿ..... .....`..
2161  [0010] 00 00 00 00 00 00 4F 43   BF 1F 56 D2 01 00 4F 43   ......OC ¿.VÒ..OC
2162  [0020] BF 1F 56 D2 01 00 4B 2F   71 21 56 D2 01 00 4B 2F   ¿.VÒ..K/ q!VÒ..K/
2163  [0030] 71 21 56 D2 01 00 00 00   00 00 00 00 00 00 00 00   q!VÒ.... ........
2164  [0040] 00 00 00 00 00 10 00 00   00 02 00 00 00 7C 00 00   ........ .....|..
2165  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
2166  [0060] 00 00 00 00 00 00 00 00   00 00 00 2E 00 64 00 00   ........ .....d..
2167  [0070] 00 00 00 00 00 00 35 A1   80 D8 51 D2 01 00 D3 E8   ......5¡ €ØQÒ..Óè
2168  [0080] 58 78 53 D2 01 00 E5 0F   96 2B 57 D2 01 00 E5 0F   XxSÒ..å. –+WÒ..å.
2169  [0090] 96 2B 57 D2 01 00 00 00   00 00 00 00 00 00 00 00   –+WÒ.... ........
2170  [00A0] 00 00 00 00 00 10 00 00   00 04 00 00 00 4C 02 00   ........ .....L..
2171  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
2172  [00C0] 00 00 00 00 00 00 00 00   00 00 00 2E 00 2E 00 00   ........ ........
2173  [00D0] 00 70 00 00 00 00 00 00   00 00 4F 43 BF 1F 56 D2   .p...... ..OC¿.VÒ
2174  [00E0] 01 00 4F 43 BF 1F 56 D2   01 00 A4 DF AE 20 56 D2   ..OC¿.VÒ ..€ß® VÒ
2175  [00F0] 01 00 A4 DF AE 20 56 D2   01 00 00 00 00 00 00 00   ..€ß® VÒ ........
2176  [0100] 00 00 00 00 00 00 00 00   00 10 00 00 00 10 00 00   ........ ........
2177  [0110] 00 7C 00 00 00 00 00 00   00 00 00 00 00 00 00 00   .|...... ........
2178  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 32   ........ .......2
2179  [0130] 00 30 00 31 00 36 00 30   00 37 00 32 00 38 00 00   .0.1.6.0 .7.2.8..
2180  [0140] 00 70 00 00 00 00 00 00   00 00 A4 DF AE 20 56 D2   .p...... ..€ß® VÒ
2181  [0150] 01 00 A4 DF AE 20 56 D2   01 00 A8 4D 5F 21 56 D2   ..€ß® VÒ ..šM_!VÒ
2182  [0160] 01 00 A8 4D 5F 21 56 D2   01 00 00 00 00 00 00 00   ..šM_!VÒ ........
2183  [0170] 00 00 00 00 00 00 00 00   00 10 00 00 00 10 00 00   ........ ........
2184  [0180] 00 7C 00 00 00 00 00 00   00 00 00 00 00 00 00 00   .|...... ........
2185  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 32   ........ .......2
2186  [01A0] 00 30 00 31 00 36 00 31   00 32 00 31 00 31 00 00   .0.1.6.1 .2.1.1..
2187  [01B0] 00 68 00 00 00 00 00 00   00 00 B6 74 66 21 56 D2   .h...... ..¶tf!VÒ
2188  [01C0] 01 00 B6 74 66 21 56 D2   01 00 B6 74 66 21 56 D2   ..¶tf!VÒ ..¶tf!VÒ
2189  [01D0] 01 00 B6 74 66 21 56 D2   01 00 00 00 00 00 00 00   ..¶tf!VÒ ........
2190  [01E0] 00 00 00 00 00 00 00 00   00 10 00 00 00 0A 00 00   ........ ........
2191  [01F0] 00 7C 00 00 00 00 00 00   00 00 00 00 00 00 00 00   .|...... ........
2192[2016/12/15 15:45:45.963000,  4] smbd/trans2.c:2612(call_trans2findfirst)
2193  SMBtrans2 mask=* directory=temp/fobopeep dirtype=22 numentries=6
2194[2016/12/15 15:45:45.963000, 10] smbd/mangle_hash2.c:793(hash2_name_to_8_3)
2195  hash2_name_to_8_3: * -> 0A877AA5 -> _2X68P~X (cache=1)
2196[2016/12/15 15:45:48.448000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
2197  got smb length of 132
2198[2016/12/15 15:45:48.448000,  6] smbd/process.c:1610(process_smb)
2199  got message type 0x0 of len 0x84
2200[2016/12/15 15:45:48.448000,  3] smbd/process.c:1612(process_smb)
2201  Transaction 5 of length 136 (0 toread)
2202[2016/12/15 15:45:48.448000,  5] lib/util.c:332(show_msg)
2203[2016/12/15 15:45:48.448000,  5] lib/util.c:342(show_msg)
2204  size=132
2205  smb_com=0x32
2206  smb_rcls=0
2207  smb_reh=0
2208  smb_err=0
2209  smb_flg=8
2210  smb_flg2=51201
2211  smb_tid=1
2212  smb_pid=29
2213  smb_uid=100
2214  smb_mid=6
2215  smt_wct=15
2216  smb_vwv[ 0]=   64 (0x40)
2217  smb_vwv[ 1]=    0 (0x0)
2218  smb_vwv[ 2]=   10 (0xA)
2219  smb_vwv[ 3]=16644 (0x4104)
2220  smb_vwv[ 4]=    0 (0x0)
2221  smb_vwv[ 5]=    0 (0x0)
2222  smb_vwv[ 6]=    0 (0x0)
2223  smb_vwv[ 7]=    0 (0x0)
2224  smb_vwv[ 8]=    0 (0x0)
2225  smb_vwv[ 9]=   64 (0x40)
2226  smb_vwv[10]=   68 (0x44)
2227  smb_vwv[11]=    0 (0x0)
2228  smb_vwv[12]=  132 (0x84)
2229  smb_vwv[13]=    1 (0x1)
2230  smb_vwv[14]=    1 (0x1)
2231  smb_bcc=67
2232[2016/12/15 15:45:48.448000, 10] ../lib/util/util.c:415(dump_data)
2233  [0000] 00 44 20 16 00 56 05 06   00 04 01 00 00 00 00 5C   .D ..V.. .......\
2234  [0010] 00 74 00 65 00 6D 00 70   00 5C 00 66 00 6F 00 62   .t.e.m.p .\.f.o.b
2235  [0020] 00 6F 00 70 00 65 00 65   00 70 00 5C 00 32 00 30   .o.p.e.e .p.\.2.0
2236  [0030] 00 31 00 36 00 30 00 37   00 32 00 38 00 5C 00 2A   .1.6.0.7 .2.8.\.*
2237  [0040] 00 00 00                                          ...
2238[2016/12/15 15:45:48.448000,  3] smbd/process.c:1417(switch_message)
2239  switch message SMBtrans2 (pid 158) conn 0x200d6790
2240[2016/12/15 15:45:48.448000,  4] smbd/uid.c:351(change_to_user)
2241  Skipping user change - already user
2242[2016/12/15 15:45:48.448000,  3] smbd/trans2.c:2349(call_trans2findfirst)
2243  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16644
2244[2016/12/15 15:45:48.448000,  5] smbd/filename.c:257(unix_convert)
2245  unix_convert called on file "temp/fobopeep/20160728/*"
2246[2016/12/15 15:45:48.448000, 10] smbd/statcache.c:244(stat_cache_lookup)
2247  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP/20160728/*]
2248[2016/12/15 15:45:48.448000, 10] smbd/statcache.c:244(stat_cache_lookup)
2249  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP/20160728]
2250[2016/12/15 15:45:48.448000, 10] smbd/statcache.c:244(stat_cache_lookup)
2251  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP]
2252[2016/12/15 15:45:48.448000, 10] smbd/statcache.c:244(stat_cache_lookup)
2253  stat_cache_lookup: lookup failed for name [TEMP]
2254[2016/12/15 15:45:48.448000,  5] smbd/filename.c:416(unix_convert)
2255  unix_convert begin: name = temp/fobopeep/20160728/*, dirpath = , start = temp/fobopeep/20160728/*
2256[2016/12/15 15:45:48.448000,  5] smbd/filename.c:184(check_parent_exists)
2257  check_parent_exists: name = temp/fobopeep/20160728/*, dirpath = temp/fobopeep/20160728, start = *
2258[2016/12/15 15:45:48.448000, 10] smbd/mangle_hash2.c:418(is_mangled)
2259  is_mangled * ?
2260[2016/12/15 15:45:48.448000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
2261  is_mangled_component * (len 1) ?
2262[2016/12/15 15:45:48.448000,  5] smbd/filename.c:616(unix_convert)
2263  Wildcard *
2264[2016/12/15 15:45:48.448000,  3] smbd/vfs.c:909(check_reduced_name)
2265  check_reduced_name [temp/fobopeep/20160728/*] [D:/]
2266[2016/12/15 15:45:48.448000, 10] smbd/vfs.c:973(check_reduced_name)
2267  check_reduced_name realpath [temp/fobopeep/20160728/*] -> [D:/Temp/fobopeep/20160728/*]
2268[2016/12/15 15:45:48.448000,  3] smbd/vfs.c:1054(check_reduced_name)
2269  check_reduced_name: temp/fobopeep/20160728/* reduced to D:/Temp/fobopeep/20160728/*
2270[2016/12/15 15:45:48.448000,  5] smbd/trans2.c:2434(call_trans2findfirst)
2271  dir=temp/fobopeep/20160728, mask = *
2272[2016/12/15 15:45:48.448000,  5] smbd/dir.c:442(dptr_create)
2273  dptr_create dir=temp/fobopeep/20160728
2274[2016/12/15 15:45:48.448000,  3] smbd/vfs.c:909(check_reduced_name)
2275  check_reduced_name [temp/fobopeep/20160728] [D:/]
2276[2016/12/15 15:45:48.448000, 10] smbd/vfs.c:973(check_reduced_name)
2277  check_reduced_name realpath [temp/fobopeep/20160728] -> [D:/Temp/fobopeep/20160728]
2278[2016/12/15 15:45:48.448000,  3] smbd/vfs.c:1054(check_reduced_name)
2279  check_reduced_name: temp/fobopeep/20160728 reduced to D:/Temp/fobopeep/20160728
2280[2016/12/15 15:45:48.448000,  3] smbd/dir.c:581(dptr_create)
2281  creating new dirptr 256 for path temp/fobopeep/20160728, expect_close = 1
2282[2016/12/15 15:45:48.448000,  4] smbd/trans2.c:2502(call_trans2findfirst)
2283  dptr_num is 256, wcard = *, attr = 22
2284[2016/12/15 15:45:48.448000,  8] smbd/trans2.c:2511(call_trans2findfirst)
2285  dirpath=<temp/fobopeep/20160728> dontdescend=<>
2286[2016/12/15 15:45:48.448000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2287  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 0
2288[2016/12/15 15:45:48.448000,  8] smbd/dosmode.c:645(dos_mode)
2289  dos_mode: temp/fobopeep/20160728/.
2290[2016/12/15 15:45:48.448000,  5] lib/os2helper.c:294(unigetxattr)
2291  unigetxattr : (temp/fobopeep/20160728/.:0) user.DOSATTRIB 56
2292[2016/12/15 15:45:48.448000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2293  get_ea_dos_attribute: temp/fobopeep/20160728/. attr = 0x10
2294[2016/12/15 15:45:48.450000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2295  get_ea_dos_attribute: file temp/fobopeep/20160728/. case 3 set btime Wed Dec 14 07:35:50 2016
2296 
2297[2016/12/15 15:45:48.450000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2298  get_ea_dos_attribute returning (0x10)d
2299[2016/12/15 15:45:48.450000,  8] lib/util.c:1320(is_in_path)
2300  is_in_path: temp/fobopeep/20160728/.
2301[2016/12/15 15:45:48.450000,  8] lib/util.c:1344(is_in_path)
2302  is_in_path: match not found
2303[2016/12/15 15:45:48.450000,  8] smbd/dosmode.c:696(dos_mode)
2304  dos_mode returning d
2305[2016/12/15 15:45:48.450000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2306  fetch_share_mode_unlocked: no share_mode record around (file not open)
2307[2016/12/15 15:45:48.450000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2308  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/. fname=. (.)
2309[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2310  smbd_marshall_dir_entry: space_remaining = 16644
2311[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2312  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2313[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:374(unilistxattr)
2314  unilistxattr : (temp/fobopeep/20160728/.:0) 47
2315[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2316  get_ea_list_from_file: ea_namelist size = 47
2317[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2318  unigetxattr : (temp/fobopeep/20160728/.:0) UID 8
2319[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2320  get_ea_value: EA UID is of length 8
2321[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2322  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2323[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2324  get_ea_list_from_file: total_len = 16, UID, val len = 8
2325[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2326  unigetxattr : (temp/fobopeep/20160728/.:0) GID 8
2327[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2328  get_ea_value: EA GID is of length 8
2329[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2330  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2331[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2332  get_ea_list_from_file: total_len = 32, GID, val len = 8
2333[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2334  unigetxattr : (temp/fobopeep/20160728/.:0) MODE 8
2335[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2336  get_ea_value: EA MODE is of length 8
2337[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2338  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
2339[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2340  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2341[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2342  unigetxattr : (temp/fobopeep/20160728/.:0) INO 12
2343[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2344  get_ea_value: EA INO is of length 12
2345[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2346  [0000] FE FF 08 00 F3 ED E7 13   3D 72 48 D4              þÿ..óíç. =rHÔ
2347[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2348  get_ea_list_from_file: total_len = 69, INO, val len = 12
2349[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2350  unigetxattr : (temp/fobopeep/20160728/.:0) RDEV 8
2351[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2352  get_ea_value: EA RDEV is of length 8
2353[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2354  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2355[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2356  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2357[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2358  unigetxattr : (temp/fobopeep/20160728/.:0) GEN 8
2359[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2360  get_ea_value: EA GEN is of length 8
2361[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2362  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2363[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2364  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2365[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2366  unigetxattr : (temp/fobopeep/20160728/.:0) FLAGS 8
2367[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2368  get_ea_value: EA FLAGS is of length 8
2369[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2370  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2371[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2372  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2373[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2374  get_ea_list_from_file: total_len = 124
2375[2016/12/15 15:45:48.450000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2376  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset -2147483648
2377[2016/12/15 15:45:48.450000,  8] smbd/dosmode.c:645(dos_mode)
2378  dos_mode: temp/fobopeep/20160728/..
2379[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2380  unigetxattr : (temp/fobopeep/20160728/..:0) user.DOSATTRIB 56
2381[2016/12/15 15:45:48.450000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2382  get_ea_dos_attribute: temp/fobopeep/20160728/.. attr = 0x10
2383[2016/12/15 15:45:48.450000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2384  get_ea_dos_attribute: file temp/fobopeep/20160728/.. case 3 set btime Wed Dec 14 07:35:50 2016
2385 
2386[2016/12/15 15:45:48.450000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2387  get_ea_dos_attribute returning (0x10)d
2388[2016/12/15 15:45:48.450000,  8] lib/util.c:1320(is_in_path)
2389  is_in_path: temp/fobopeep/20160728/..
2390[2016/12/15 15:45:48.450000,  8] lib/util.c:1344(is_in_path)
2391  is_in_path: match not found
2392[2016/12/15 15:45:48.450000,  8] smbd/dosmode.c:696(dos_mode)
2393  dos_mode returning d
2394[2016/12/15 15:45:48.450000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2395  fetch_share_mode_unlocked: no share_mode record around (file not open)
2396[2016/12/15 15:45:48.450000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2397  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/.. fname=.. (..)
2398[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2399  smbd_marshall_dir_entry: space_remaining = 16548
2400[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2401  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2402[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:374(unilistxattr)
2403  unilistxattr : (temp/fobopeep/20160728/..:0) 47
2404[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2405  get_ea_list_from_file: ea_namelist size = 47
2406[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2407  unigetxattr : (temp/fobopeep/20160728/..:0) UID 8
2408[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:154(get_ea_value)
2409  get_ea_value: EA UID is of length 8
2410[2016/12/15 15:45:48.450000, 10] ../lib/util/util.c:415(dump_data)
2411  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2412[2016/12/15 15:45:48.450000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2413  get_ea_list_from_file: total_len = 16, UID, val len = 8
2414[2016/12/15 15:45:48.450000,  5] lib/os2helper.c:294(unigetxattr)
2415  unigetxattr : (temp/fobopeep/20160728/..:0) GID 8
2416[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2417  get_ea_value: EA GID is of length 8
2418[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2419  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2420[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2421  get_ea_list_from_file: total_len = 32, GID, val len = 8
2422[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2423  unigetxattr : (temp/fobopeep/20160728/..:0) MODE 8
2424[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2425  get_ea_value: EA MODE is of length 8
2426[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2427  [0000] FE FF 04 00 ED 41 00 00                            þÿ..íA..
2428[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2429  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2430[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2431  unigetxattr : (temp/fobopeep/20160728/..:0) INO 12
2432[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2433  get_ea_value: EA INO is of length 12
2434[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2435  [0000] FE FF 08 00 25 F6 42 70   B7 7C 40 5B              þÿ..%öBp ·|@[
2436[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2437  get_ea_list_from_file: total_len = 69, INO, val len = 12
2438[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2439  unigetxattr : (temp/fobopeep/20160728/..:0) RDEV 8
2440[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2441  get_ea_value: EA RDEV is of length 8
2442[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2443  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2444[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2445  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2446[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2447  unigetxattr : (temp/fobopeep/20160728/..:0) GEN 8
2448[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2449  get_ea_value: EA GEN is of length 8
2450[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2451  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2452[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2453  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2454[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2455  unigetxattr : (temp/fobopeep/20160728/..:0) FLAGS 8
2456[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2457  get_ea_value: EA FLAGS is of length 8
2458[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2459  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2460[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2461  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2462[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2463  get_ea_list_from_file: total_len = 124
2464[2016/12/15 15:45:48.452000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2465  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 3
2466[2016/12/15 15:45:48.452000,  8] smbd/dosmode.c:645(dos_mode)
2467  dos_mode: temp/fobopeep/20160728/eCS-N.zip
2468[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2469  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) user.DOSATTRIB 56
2470[2016/12/15 15:45:48.452000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2471  get_ea_dos_attribute: temp/fobopeep/20160728/eCS-N.zip attr = 0x20
2472[2016/12/15 15:45:48.452000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2473  get_ea_dos_attribute: file temp/fobopeep/20160728/eCS-N.zip case 3 set btime Thu Jul 28 10:05:52 2016
2474 
2475[2016/12/15 15:45:48.452000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2476  get_ea_dos_attribute returning (0x20)a
2477[2016/12/15 15:45:48.452000,  8] lib/util.c:1320(is_in_path)
2478  is_in_path: temp/fobopeep/20160728/eCS-N.zip
2479[2016/12/15 15:45:48.452000,  8] lib/util.c:1344(is_in_path)
2480  is_in_path: match not found
2481[2016/12/15 15:45:48.452000,  8] smbd/dosmode.c:696(dos_mode)
2482  dos_mode returning a
2483[2016/12/15 15:45:48.452000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2484  fetch_share_mode_unlocked: no share_mode record around (file not open)
2485[2016/12/15 15:45:48.452000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2486  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/eCS-N.zip fname=eCS-N.zip (eCS-N.zip)
2487[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2488  smbd_marshall_dir_entry: space_remaining = 16448
2489[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2490  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2491[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:374(unilistxattr)
2492  unilistxattr : (temp/fobopeep/20160728/eCS-N.zip:0) 58
2493[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2494  get_ea_list_from_file: ea_namelist size = 58
2495[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2496  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) UID 8
2497[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2498  get_ea_value: EA UID is of length 8
2499[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2500  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2501[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2502  get_ea_list_from_file: total_len = 16, UID, val len = 8
2503[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2504  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) GID 8
2505[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2506  get_ea_value: EA GID is of length 8
2507[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2508  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2509[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2510  get_ea_list_from_file: total_len = 32, GID, val len = 8
2511[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2512  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) MODE 8
2513[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2514  get_ea_value: EA MODE is of length 8
2515[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2516  [0000] FE FF 04 00 F6 81 00 00                            þÿ..ö..
2517[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2518  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2519[2016/12/15 15:45:48.452000,  5] lib/os2helper.c:294(unigetxattr)
2520  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) INO 12
2521[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:154(get_ea_value)
2522  get_ea_value: EA INO is of length 12
2523[2016/12/15 15:45:48.452000, 10] ../lib/util/util.c:415(dump_data)
2524  [0000] FE FF 08 00 DA 43 8E 33   A8 BA EB B9              þÿ..ÚCŽ3 šºë¹
2525[2016/12/15 15:45:48.452000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2526  get_ea_list_from_file: total_len = 69, INO, val len = 12
2527[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2528  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) RDEV 8
2529[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2530  get_ea_value: EA RDEV is of length 8
2531[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2532  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2533[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2534  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2535[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2536  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) GEN 8
2537[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2538  get_ea_value: EA GEN is of length 8
2539[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2540  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2541[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2542  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2543[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2544  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) FLAGS 8
2545[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2546  get_ea_value: EA FLAGS is of length 8
2547[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2548  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2549[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2550  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2551[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2552  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) .CLASSINFO 189
2553[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2554  get_ea_value: EA .CLASSINFO is of length 189
2555[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2556  [0000] FE FF B9 00 10 00 00 00   A6 00 00 00 57 50 44 61   þÿ¹..... Š...WPDa
2557  [0010] 74 61 46 69 6C 65 00 4B   00 50 18 10 00 50 18 A0   taFile.K .P...P. 
2558  [0020] 00 50 18 96 00 00 00 0F   00 28 00 73 7A 62 64 57   .P.–.... .(.szbdW
2559  [0030] 50 44 61 74 61 46 69 6C   65 00 02 00 01 00 04 00   PDataFil e.......
2560  [0040] 00 00 00 00 02 00 02 00   04 00 00 00 00 00 02 00   ........ ........
2561  [0050] 03 00 04 00 07 00 00 00   02 00 04 00 04 00 02 00   ........ ........
2562  [0060] 00 00 09 00 48 00 57 50   4F 62 6A 65 63 74 00 04   ....H.WP Object..
2563  [0070] 00 0B 00 20 00 00 10 00   00 00 00 00 00 09 00 00   ... .... ........
2564  [0080] 00 10 00 00 00 00 00 00   00 00 00 00 00 03 00 00   ........ ........
2565  [0090] 00 02 00 00 00 04 00 0C   00 0E 00 02 00 32 32 36   ........ .....226
2566  [00A0] 34 37 34 40 32 30 00 FF   FF 04 00 04 00 08 00 FF   474@20.ÿ ÿ......ÿ
2567  [00B0] FF FF FF FF FF FF FF 00   00 00 00 00 00           ÿÿÿÿÿÿÿ. .....
2568[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2569  get_ea_list_from_file: total_len = 324, .CLASSINFO, val len = 189
2570[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2571  get_ea_list_from_file: total_len = 328
2572[2016/12/15 15:45:48.454000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2573  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 4
2574[2016/12/15 15:45:48.454000,  8] smbd/dosmode.c:645(dos_mode)
2575  dos_mode: temp/fobopeep/20160728/eCS-N1.zip
2576[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2577  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) user.DOSATTRIB 56
2578[2016/12/15 15:45:48.454000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2579  get_ea_dos_attribute: temp/fobopeep/20160728/eCS-N1.zip attr = 0x20
2580[2016/12/15 15:45:48.454000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2581  get_ea_dos_attribute: file temp/fobopeep/20160728/eCS-N1.zip case 3 set btime Thu Jul 28 10:08:00 2016
2582 
2583[2016/12/15 15:45:48.454000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2584  get_ea_dos_attribute returning (0x20)a
2585[2016/12/15 15:45:48.454000,  8] lib/util.c:1320(is_in_path)
2586  is_in_path: temp/fobopeep/20160728/eCS-N1.zip
2587[2016/12/15 15:45:48.454000,  8] lib/util.c:1344(is_in_path)
2588  is_in_path: match not found
2589[2016/12/15 15:45:48.454000,  8] smbd/dosmode.c:696(dos_mode)
2590  dos_mode returning a
2591[2016/12/15 15:45:48.454000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2592  fetch_share_mode_unlocked: no share_mode record around (file not open)
2593[2016/12/15 15:45:48.454000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2594  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/eCS-N1.zip fname=eCS-N1.zip (eCS-N1.zip)
2595[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2596  smbd_marshall_dir_entry: space_remaining = 16336
2597[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2598  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2599[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:374(unilistxattr)
2600  unilistxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) 47
2601[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2602  get_ea_list_from_file: ea_namelist size = 47
2603[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2604  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) UID 8
2605[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2606  get_ea_value: EA UID is of length 8
2607[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2608  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2609[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2610  get_ea_list_from_file: total_len = 16, UID, val len = 8
2611[2016/12/15 15:45:48.454000,  5] lib/os2helper.c:294(unigetxattr)
2612  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) GID 8
2613[2016/12/15 15:45:48.454000, 10] smbd/trans2.c:154(get_ea_value)
2614  get_ea_value: EA GID is of length 8
2615[2016/12/15 15:45:48.454000, 10] ../lib/util/util.c:415(dump_data)
2616  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2617[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2618  get_ea_list_from_file: total_len = 32, GID, val len = 8
2619[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2620  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) MODE 8
2621[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2622  get_ea_value: EA MODE is of length 8
2623[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2624  [0000] FE FF 04 00 F6 81 00 00                            þÿ..ö..
2625[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2626  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2627[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2628  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) INO 12
2629[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2630  get_ea_value: EA INO is of length 12
2631[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2632  [0000] FE FF 08 00 60 D2 77 77   8B 0A 09 A2              þÿ..`Òww ‹..¢
2633[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2634  get_ea_list_from_file: total_len = 69, INO, val len = 12
2635[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2636  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) RDEV 8
2637[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2638  get_ea_value: EA RDEV is of length 8
2639[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2640  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2641[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2642  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2643[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2644  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) GEN 8
2645[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2646  get_ea_value: EA GEN is of length 8
2647[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2648  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2649[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2650  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2651[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2652  unigetxattr : (temp/fobopeep/20160728/eCS-N1.zip:0) FLAGS 8
2653[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2654  get_ea_value: EA FLAGS is of length 8
2655[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2656  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2657[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2658  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2659[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2660  get_ea_list_from_file: total_len = 124
2661[2016/12/15 15:45:48.456000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2662  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 5
2663[2016/12/15 15:45:48.456000,  8] smbd/dosmode.c:645(dos_mode)
2664  dos_mode: temp/fobopeep/20160728/server-H.zip
2665[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2666  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) user.DOSATTRIB 56
2667[2016/12/15 15:45:48.456000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2668  get_ea_dos_attribute: temp/fobopeep/20160728/server-H.zip attr = 0x20
2669[2016/12/15 15:45:48.456000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2670  get_ea_dos_attribute: file temp/fobopeep/20160728/server-H.zip case 3 set btime Thu Jul 28 10:00:06 2016
2671 
2672[2016/12/15 15:45:48.456000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2673  get_ea_dos_attribute returning (0x20)a
2674[2016/12/15 15:45:48.456000,  8] lib/util.c:1320(is_in_path)
2675  is_in_path: temp/fobopeep/20160728/server-H.zip
2676[2016/12/15 15:45:48.456000,  8] lib/util.c:1344(is_in_path)
2677  is_in_path: match not found
2678[2016/12/15 15:45:48.456000,  8] smbd/dosmode.c:696(dos_mode)
2679  dos_mode returning a
2680[2016/12/15 15:45:48.456000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2681  fetch_share_mode_unlocked: no share_mode record around (file not open)
2682[2016/12/15 15:45:48.456000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2683  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/server-H.zip fname=server-H.zip (server-H.zip)
2684[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2685  smbd_marshall_dir_entry: space_remaining = 16220
2686[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2687  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2688[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:374(unilistxattr)
2689  unilistxattr : (temp/fobopeep/20160728/server-H.zip:0) 47
2690[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2691  get_ea_list_from_file: ea_namelist size = 47
2692[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2693  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) UID 8
2694[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2695  get_ea_value: EA UID is of length 8
2696[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2697  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2698[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2699  get_ea_list_from_file: total_len = 16, UID, val len = 8
2700[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2701  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) GID 8
2702[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2703  get_ea_value: EA GID is of length 8
2704[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2705  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2706[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2707  get_ea_list_from_file: total_len = 32, GID, val len = 8
2708[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2709  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) MODE 8
2710[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2711  get_ea_value: EA MODE is of length 8
2712[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2713  [0000] FE FF 04 00 F6 81 00 00                            þÿ..ö..
2714[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2715  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2716[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2717  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) INO 12
2718[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:154(get_ea_value)
2719  get_ea_value: EA INO is of length 12
2720[2016/12/15 15:45:48.456000, 10] ../lib/util/util.c:415(dump_data)
2721  [0000] FE FF 08 00 7F 35 EF 15   89 6E 0B C7              þÿ...5ï. ‰n.Ç
2722[2016/12/15 15:45:48.456000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2723  get_ea_list_from_file: total_len = 69, INO, val len = 12
2724[2016/12/15 15:45:48.456000,  5] lib/os2helper.c:294(unigetxattr)
2725  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) RDEV 8
2726[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2727  get_ea_value: EA RDEV is of length 8
2728[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2729  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2730[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2731  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2732[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2733  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) GEN 8
2734[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2735  get_ea_value: EA GEN is of length 8
2736[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2737  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2738[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2739  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2740[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2741  unigetxattr : (temp/fobopeep/20160728/server-H.zip:0) FLAGS 8
2742[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2743  get_ea_value: EA FLAGS is of length 8
2744[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2745  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2746[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2747  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2748[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2749  get_ea_list_from_file: total_len = 124
2750[2016/12/15 15:45:48.458000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2751  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 6
2752[2016/12/15 15:45:48.458000,  8] smbd/dosmode.c:645(dos_mode)
2753  dos_mode: temp/fobopeep/20160728/server-H1.zip
2754[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2755  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) user.DOSATTRIB 56
2756[2016/12/15 15:45:48.458000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2757  get_ea_dos_attribute: temp/fobopeep/20160728/server-H1.zip attr = 0x20
2758[2016/12/15 15:45:48.458000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2759  get_ea_dos_attribute: file temp/fobopeep/20160728/server-H1.zip case 3 set btime Thu Jul 28 10:01:46 2016
2760 
2761[2016/12/15 15:45:48.458000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2762  get_ea_dos_attribute returning (0x20)a
2763[2016/12/15 15:45:48.458000,  8] lib/util.c:1320(is_in_path)
2764  is_in_path: temp/fobopeep/20160728/server-H1.zip
2765[2016/12/15 15:45:48.458000,  8] lib/util.c:1344(is_in_path)
2766  is_in_path: match not found
2767[2016/12/15 15:45:48.458000,  8] smbd/dosmode.c:696(dos_mode)
2768  dos_mode returning a
2769[2016/12/15 15:45:48.458000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2770  fetch_share_mode_unlocked: no share_mode record around (file not open)
2771[2016/12/15 15:45:48.458000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2772  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/server-H1.zip fname=server-H1.zip (server-H1.zip)
2773[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2774  smbd_marshall_dir_entry: space_remaining = 16100
2775[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2776  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2777[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:374(unilistxattr)
2778  unilistxattr : (temp/fobopeep/20160728/server-H1.zip:0) 47
2779[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2780  get_ea_list_from_file: ea_namelist size = 47
2781[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2782  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) UID 8
2783[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2784  get_ea_value: EA UID is of length 8
2785[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2786  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2787[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2788  get_ea_list_from_file: total_len = 16, UID, val len = 8
2789[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2790  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) GID 8
2791[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2792  get_ea_value: EA GID is of length 8
2793[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2794  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2795[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2796  get_ea_list_from_file: total_len = 32, GID, val len = 8
2797[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2798  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) MODE 8
2799[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2800  get_ea_value: EA MODE is of length 8
2801[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2802  [0000] FE FF 04 00 F6 81 00 00                            þÿ..ö..
2803[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2804  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2805[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2806  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) INO 12
2807[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2808  get_ea_value: EA INO is of length 12
2809[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2810  [0000] FE FF 08 00 6D 1C C2 25   CC 82 1B 35              þÿ..m.Â% ̂.5
2811[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2812  get_ea_list_from_file: total_len = 69, INO, val len = 12
2813[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2814  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) RDEV 8
2815[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2816  get_ea_value: EA RDEV is of length 8
2817[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2818  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2819[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2820  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2821[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2822  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) GEN 8
2823[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2824  get_ea_value: EA GEN is of length 8
2825[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2826  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2827[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2828  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2829[2016/12/15 15:45:48.458000,  5] lib/os2helper.c:294(unigetxattr)
2830  unigetxattr : (temp/fobopeep/20160728/server-H1.zip:0) FLAGS 8
2831[2016/12/15 15:45:48.458000, 10] smbd/trans2.c:154(get_ea_value)
2832  get_ea_value: EA FLAGS is of length 8
2833[2016/12/15 15:45:48.458000, 10] ../lib/util/util.c:415(dump_data)
2834  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2835[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2836  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2837[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2838  get_ea_list_from_file: total_len = 124
2839[2016/12/15 15:45:48.460000, 10] smbd/mangle_hash2.c:793(hash2_name_to_8_3)
2840  hash2_name_to_8_3: server-H1.zip -> 78E22B88 -> SXJGYV~C.ZIP (cache=1)
2841[2016/12/15 15:45:48.460000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2842  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset 7
2843[2016/12/15 15:45:48.460000,  8] smbd/dosmode.c:645(dos_mode)
2844  dos_mode: temp/fobopeep/20160728/server-H2.zip
2845[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2846  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) user.DOSATTRIB 56
2847[2016/12/15 15:45:48.460000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
2848  get_ea_dos_attribute: temp/fobopeep/20160728/server-H2.zip attr = 0x20
2849[2016/12/15 15:45:48.460000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
2850  get_ea_dos_attribute: file temp/fobopeep/20160728/server-H2.zip case 3 set btime Thu Jul 28 10:01:48 2016
2851 
2852[2016/12/15 15:45:48.460000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
2853  get_ea_dos_attribute returning (0x20)a
2854[2016/12/15 15:45:48.460000,  8] lib/util.c:1320(is_in_path)
2855  is_in_path: temp/fobopeep/20160728/server-H2.zip
2856[2016/12/15 15:45:48.460000,  8] lib/util.c:1344(is_in_path)
2857  is_in_path: match not found
2858[2016/12/15 15:45:48.460000,  8] smbd/dosmode.c:696(dos_mode)
2859  dos_mode returning a
2860[2016/12/15 15:45:48.460000, 10] locking/locking.c:1026(fetch_share_mode_unlocked)
2861  fetch_share_mode_unlocked: no share_mode record around (file not open)
2862[2016/12/15 15:45:48.460000,  3] smbd/dir.c:1050(smbd_dirptr_get_entry)
2863  smbd_dirptr_get_entry mask=[*] found temp/fobopeep/20160728/server-H2.zip fname=server-H2.zip (server-H2.zip)
2864[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:1629(smbd_marshall_dir_entry)
2865  smbd_marshall_dir_entry: space_remaining = 15980
2866[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:1778(smbd_marshall_dir_entry)
2867  smbd_marshall_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2868[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:374(unilistxattr)
2869  unilistxattr : (temp/fobopeep/20160728/server-H2.zip:0) 47
2870[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:239(get_ea_names_from_file)
2871  get_ea_list_from_file: ea_namelist size = 47
2872[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2873  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) UID 8
2874[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2875  get_ea_value: EA UID is of length 8
2876[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2877  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2878[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2879  get_ea_list_from_file: total_len = 16, UID, val len = 8
2880[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2881  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) GID 8
2882[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2883  get_ea_value: EA GID is of length 8
2884[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2885  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2886[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2887  get_ea_list_from_file: total_len = 32, GID, val len = 8
2888[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2889  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) MODE 8
2890[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2891  get_ea_value: EA MODE is of length 8
2892[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2893  [0000] FE FF 04 00 F6 81 00 00                            þÿ..ö..
2894[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2895  get_ea_list_from_file: total_len = 49, MODE, val len = 8
2896[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2897  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) INO 12
2898[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2899  get_ea_value: EA INO is of length 12
2900[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2901  [0000] FE FF 08 00 FC 5D 94 4E   1C F8 BB 72              þÿ..ü]”N .ø»r
2902[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2903  get_ea_list_from_file: total_len = 69, INO, val len = 12
2904[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2905  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) RDEV 8
2906[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2907  get_ea_value: EA RDEV is of length 8
2908[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2909  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2910[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2911  get_ea_list_from_file: total_len = 86, RDEV, val len = 8
2912[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2913  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) GEN 8
2914[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2915  get_ea_value: EA GEN is of length 8
2916[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2917  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2918[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2919  get_ea_list_from_file: total_len = 102, GEN, val len = 8
2920[2016/12/15 15:45:48.460000,  5] lib/os2helper.c:294(unigetxattr)
2921  unigetxattr : (temp/fobopeep/20160728/server-H2.zip:0) FLAGS 8
2922[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:154(get_ea_value)
2923  get_ea_value: EA FLAGS is of length 8
2924[2016/12/15 15:45:48.460000, 10] ../lib/util/util.c:415(dump_data)
2925  [0000] FE FF 04 00 00 00 00 00                            þÿ......
2926[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:356(get_ea_list_from_file)
2927  get_ea_list_from_file: total_len = 120, FLAGS, val len = 8
2928[2016/12/15 15:45:48.460000, 10] smbd/trans2.c:368(get_ea_list_from_file)
2929  get_ea_list_from_file: total_len = 124
2930[2016/12/15 15:45:48.460000, 10] smbd/mangle_hash2.c:793(hash2_name_to_8_3)
2931  hash2_name_to_8_3: server-H2.zip -> 78E22B8B -> SXJGYV~F.ZIP (cache=1)
2932[2016/12/15 15:45:48.460000,  6] smbd/dir.c:967(smbd_dirptr_get_entry)
2933  smbd_dirptr_get_entry: dirptr 0x200d5400 now at offset -1
2934[2016/12/15 15:45:48.460000,  5] smbd/trans2.c:2568(call_trans2findfirst)
2935  call_trans2findfirst - (2) closing dptr_num 256
2936[2016/12/15 15:45:48.460000,  4] smbd/dir.c:260(dptr_close_internal)
2937  closing dptr key 256
2938[2016/12/15 15:45:48.460000,  9] smbd/trans2.c:992(send_trans2_replies)
2939  t2_rep: params_sent_thistime = 10, data_sent_thistime = 784, useable_space = 131010
2940[2016/12/15 15:45:48.460000,  9] smbd/trans2.c:994(send_trans2_replies)
2941  t2_rep: params_to_send = 10, data_to_send = 784, paramsize = 10, datasize = 784
2942[2016/12/15 15:45:48.460000,  5] lib/util.c:332(show_msg)
2943[2016/12/15 15:45:48.460000,  5] lib/util.c:342(show_msg)
2944  size=852
2945  smb_com=0x32
2946  smb_rcls=0
2947  smb_reh=0
2948  smb_err=0
2949  smb_flg=136
2950  smb_flg2=51203
2951  smb_tid=1
2952  smb_pid=29
2953  smb_uid=100
2954  smb_mid=6
2955  smt_wct=10
2956  smb_vwv[ 0]=   10 (0xA)
2957  smb_vwv[ 1]=  784 (0x310)
2958  smb_vwv[ 2]=    0 (0x0)
2959  smb_vwv[ 3]=   10 (0xA)
2960  smb_vwv[ 4]=   56 (0x38)
2961  smb_vwv[ 5]=    0 (0x0)
2962  smb_vwv[ 6]=  784 (0x310)
2963  smb_vwv[ 7]=   68 (0x44)
2964  smb_vwv[ 8]=    0 (0x0)
2965  smb_vwv[ 9]=    0 (0x0)
2966  smb_bcc=797
2967[2016/12/15 15:45:48.462000, 10] ../lib/util/util.c:415(dump_data)
2968  [0000] 00 FD FF 07 00 01 00 00   00 98 02 00 00 60 00 00   .ýÿ..... .˜...`..
2969  [0010] 00 00 00 00 00 00 4F 43   BF 1F 56 D2 01 00 4F 43   ......OC ¿.VÒ..OC
2970  [0020] BF 1F 56 D2 01 00 A4 DF   AE 20 56 D2 01 00 A4 DF   ¿.VÒ..€ß ® VÒ..€ß
2971  [0030] AE 20 56 D2 01 00 00 00   00 00 00 00 00 00 00 00   ® VÒ.... ........
2972  [0040] 00 00 00 00 00 10 00 00   00 02 00 00 00 7C 00 00   ........ .....|..
2973  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
2974  [0060] 00 00 00 00 00 00 00 00   00 00 00 2E 00 64 00 00   ........ .....d..
2975  [0070] 00 00 00 00 00 00 4F 43   BF 1F 56 D2 01 00 4F 43   ......OC ¿.VÒ..OC
2976  [0080] BF 1F 56 D2 01 00 4B 2F   71 21 56 D2 01 00 4B 2F   ¿.VÒ..K/ q!VÒ..K/
2977  [0090] 71 21 56 D2 01 00 00 00   00 00 00 00 00 00 00 00   q!VÒ.... ........
2978  [00A0] 00 00 00 00 00 10 00 00   00 04 00 00 00 7C 00 00   ........ .....|..
2979  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
2980  [00C0] 00 00 00 00 00 00 00 00   00 00 00 2E 00 2E 00 00   ........ ........
2981  [00D0] 00 70 00 00 00 00 00 00   00 00 D8 AF 4B F2 E8 D1   .p...... ..دKòèÑ
2982  [00E0] 01 00 7C 74 C0 1F 56 D2   01 00 D8 AF 4B F2 E8 D1   ..|tÀ.VÒ ..دKòèÑ
2983  [00F0] 01 00 D8 AF 4B F2 E8 D1   01 A0 CC 78 39 00 00 00   ..دKòèÑ . Ìx9...
2984  [0100] 00 00 E0 78 39 00 00 00   00 20 00 00 00 12 00 00   ..àx9... . ......
2985  [0110] 00 48 01 00 00 00 00 00   00 00 00 00 00 00 00 00   .H...... ........
2986  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 65   ........ .......e
2987  [0130] 00 43 00 53 00 2D 00 4E   00 2E 00 7A 00 69 00 70   .C.S.-.N ...z.i.p
2988  [0140] 00 74 00 00 00 00 00 00   00 00 18 FB 97 F2 E8 D1   .t...... ...û—òèÑ
2989  [0150] 01 00 27 05 02 20 56 D2   01 00 18 FB 97 F2 E8 D1   ..'.. VÒ ...û—òèÑ
2990  [0160] 01 00 18 FB 97 F2 E8 D1   01 FF F1 97 3D 00 00 00   ...û—òèÑ .ÿñ—=...
2991  [0170] 00 00 10 98 3D 00 00 00   00 20 00 00 00 14 00 00   ...˜=... . ......
2992  [0180] 00 7C 00 00 00 00 00 00   00 00 00 00 00 00 00 00   .|...... ........
2993  [0190] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 65   ........ .......e
2994  [01A0] 00 43 00 53 00 2D 00 4E   00 31 00 2E 00 7A 00 69   .C.S.-.N .1...z.i
2995  [01B0] 00 70 00 00 00 78 00 00   00 00 00 00 00 00 6F 74   .p...x.. ......ot
2996  [01C0] 7D F1 E8 D1 01 00 6A 0C   3A 20 56 D2 01 00 6F 74   }ñèÑ..j. : VÒ..ot
2997  [01D0] 7D F1 E8 D1 01 00 6F 74   7D F1 E8 D1 01 EF 5A 20   }ñèÑ..ot }ñèÑ.ïZ
2998  [01E0] 40 00 00 00 00 00 70 20   40 00 00 00 00 20 00 00   @.....p  @.... ..
2999  [01F0] 00 18 00 00 00 7C 00 00   00 00 00 00 00 00 00 00   .....|.. ........
3000[2016/12/15 15:45:48.462000,  4] smbd/trans2.c:2612(call_trans2findfirst)
3001  SMBtrans2 mask=* directory=temp/fobopeep/20160728 dirtype=22 numentries=7
3002[2016/12/15 15:45:48.462000, 10] smbd/mangle_hash2.c:793(hash2_name_to_8_3)
3003  hash2_name_to_8_3: * -> 0A877AA5 -> _2X68P~X (cache=1)
3004[2016/12/15 15:45:49.755000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
3005  got smb length of 94
3006[2016/12/15 15:45:49.755000,  6] smbd/process.c:1610(process_smb)
3007  got message type 0x0 of len 0x5e
3008[2016/12/15 15:45:49.755000,  3] smbd/process.c:1612(process_smb)
3009  Transaction 6 of length 98 (0 toread)
3010[2016/12/15 15:45:49.755000,  5] lib/util.c:332(show_msg)
3011[2016/12/15 15:45:49.755000,  5] lib/util.c:342(show_msg)
3012  size=94
3013  smb_com=0x32
3014  smb_rcls=0
3015  smb_reh=0
3016  smb_err=0
3017  smb_flg=8
3018  smb_flg2=51201
3019  smb_tid=1
3020  smb_pid=29
3021  smb_uid=100
3022  smb_mid=7
3023  smt_wct=15
3024  smb_vwv[ 0]=   26 (0x1A)
3025  smb_vwv[ 1]=    0 (0x0)
3026  smb_vwv[ 2]=   10 (0xA)
3027  smb_vwv[ 3]=65535 (0xFFFF)
3028  smb_vwv[ 4]=    0 (0x0)
3029  smb_vwv[ 5]=    0 (0x0)
3030  smb_vwv[ 6]=    0 (0x0)
3031  smb_vwv[ 7]=    0 (0x0)
3032  smb_vwv[ 8]=    0 (0x0)
3033  smb_vwv[ 9]=   26 (0x1A)
3034  smb_vwv[10]=   68 (0x44)
3035  smb_vwv[11]=    0 (0x0)
3036  smb_vwv[12]=   94 (0x5E)
3037  smb_vwv[13]=    1 (0x1)
3038  smb_vwv[14]=    5 (0x5)
3039  smb_bcc=29
3040[2016/12/15 15:45:49.755000, 10] ../lib/util/util.c:415(dump_data)
3041  [0000] 00 44 20 04 00 00 00 00   00 65 00 43 00 53 00 2D   .D ..... .e.C.S.-
3042  [0010] 00 4E 00 2E 00 7A 00 69   00 70 00 00 00           .N...z.i .p...
3043[2016/12/15 15:45:49.755000,  3] smbd/process.c:1417(switch_message)
3044  switch message SMBtrans2 (pid 158) conn 0x200d6790
3045[2016/12/15 15:45:49.755000,  4] smbd/uid.c:351(change_to_user)
3046  Skipping user change - already user
3047[2016/12/15 15:45:49.755000,  3] smbd/trans2.c:5253(call_trans2qfilepathinfo)
3048  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 4
3049[2016/12/15 15:45:49.755000,  5] smbd/filename.c:257(unix_convert)
3050  unix_convert called on file "eCS-N.zip"
3051[2016/12/15 15:45:49.755000, 10] smbd/statcache.c:244(stat_cache_lookup)
3052  stat_cache_lookup: lookup failed for name [ECS-N.ZIP]
3053[2016/12/15 15:45:49.755000,  5] smbd/filename.c:416(unix_convert)
3054  unix_convert begin: name = eCS-N.zip, dirpath = , start = eCS-N.zip
3055[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:418(is_mangled)
3056  is_mangled eCS-N.zip ?
3057[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3058  is_mangled_component eCS-N.zip (len 9) ?
3059[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:418(is_mangled)
3060  is_mangled eCS-N.zip ?
3061[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3062  is_mangled_component eCS-N.zip (len 9) ?
3063[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:418(is_mangled)
3064  is_mangled eCS-N.zip ?
3065[2016/12/15 15:45:49.755000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3066  is_mangled_component eCS-N.zip (len 9) ?
3067[2016/12/15 15:45:49.755000,  5] smbd/filename.c:805(unix_convert)
3068  New file eCS-N.zip
3069[2016/12/15 15:45:49.755000,  3] smbd/vfs.c:909(check_reduced_name)
3070  check_reduced_name [eCS-N.zip] [D:/]
3071[2016/12/15 15:45:49.755000, 10] smbd/vfs.c:973(check_reduced_name)
3072  check_reduced_name realpath [eCS-N.zip] -> [D:/eCS-N.zip]
3073[2016/12/15 15:45:49.755000,  3] smbd/vfs.c:1054(check_reduced_name)
3074  check_reduced_name: eCS-N.zip reduced to D:/eCS-N.zip
3075[2016/12/15 15:45:49.755000,  3] smbd/trans2.c:5372(call_trans2qfilepathinfo)
3076  call_trans2qfilepathinfo: SMB_VFS_STAT of eCS-N.zip failed (No such file or directory)
3077[2016/12/15 15:45:49.755000,  3] smbd/error.c:81(error_packet_set)
3078  error packet at smbd/trans2.c(5374) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
3079[2016/12/15 15:45:49.755000,  5] lib/util.c:332(show_msg)
3080[2016/12/15 15:45:49.755000,  5] lib/util.c:342(show_msg)
3081  size=35
3082  smb_com=0x32
3083  smb_rcls=52
3084  smb_reh=0
3085  smb_err=49152
3086  smb_flg=136
3087  smb_flg2=51203
3088  smb_tid=1
3089  smb_pid=29
3090  smb_uid=100
3091  smb_mid=7
3092  smt_wct=0
3093  smb_bcc=0
3094[2016/12/15 15:45:49.755000, 10] ../lib/util/util.c:415(dump_data)
3095[2016/12/15 15:45:49.756000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
3096  got smb length of 94
3097[2016/12/15 15:45:49.756000,  6] smbd/process.c:1610(process_smb)
3098  got message type 0x0 of len 0x5e
3099[2016/12/15 15:45:49.756000,  3] smbd/process.c:1612(process_smb)
3100  Transaction 7 of length 98 (0 toread)
3101[2016/12/15 15:45:49.756000,  5] lib/util.c:332(show_msg)
3102[2016/12/15 15:45:49.756000,  5] lib/util.c:342(show_msg)
3103  size=94
3104  smb_com=0x32
3105  smb_rcls=0
3106  smb_reh=0
3107  smb_err=0
3108  smb_flg=8
3109  smb_flg2=51201
3110  smb_tid=1
3111  smb_pid=29
3112  smb_uid=100
3113  smb_mid=8
3114  smt_wct=15
3115  smb_vwv[ 0]=   26 (0x1A)
3116  smb_vwv[ 1]=    0 (0x0)
3117  smb_vwv[ 2]=   10 (0xA)
3118  smb_vwv[ 3]=65535 (0xFFFF)
3119  smb_vwv[ 4]=    0 (0x0)
3120  smb_vwv[ 5]=    0 (0x0)
3121  smb_vwv[ 6]=    0 (0x0)
3122  smb_vwv[ 7]=    0 (0x0)
3123  smb_vwv[ 8]=    0 (0x0)
3124  smb_vwv[ 9]=   26 (0x1A)
3125  smb_vwv[10]=   68 (0x44)
3126  smb_vwv[11]=    0 (0x0)
3127  smb_vwv[12]=   94 (0x5E)
3128  smb_vwv[13]=    1 (0x1)
3129  smb_vwv[14]=    5 (0x5)
3130  smb_bcc=29
3131[2016/12/15 15:45:49.756000, 10] ../lib/util/util.c:415(dump_data)
3132  [0000] 00 44 20 04 00 00 00 00   00 65 00 43 00 53 00 2D   .D ..... .e.C.S.-
3133  [0010] 00 4E 00 2E 00 7A 00 69   00 70 00 00 00           .N...z.i .p...
3134[2016/12/15 15:45:49.756000,  3] smbd/process.c:1417(switch_message)
3135  switch message SMBtrans2 (pid 158) conn 0x200d6790
3136[2016/12/15 15:45:49.756000,  4] smbd/uid.c:351(change_to_user)
3137  Skipping user change - already user
3138[2016/12/15 15:45:49.756000,  3] smbd/trans2.c:5253(call_trans2qfilepathinfo)
3139  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 4
3140[2016/12/15 15:45:49.756000,  5] smbd/filename.c:257(unix_convert)
3141  unix_convert called on file "eCS-N.zip"
3142[2016/12/15 15:45:49.756000, 10] smbd/statcache.c:244(stat_cache_lookup)
3143  stat_cache_lookup: lookup failed for name [ECS-N.ZIP]
3144[2016/12/15 15:45:49.756000,  5] smbd/filename.c:416(unix_convert)
3145  unix_convert begin: name = eCS-N.zip, dirpath = , start = eCS-N.zip
3146[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:418(is_mangled)
3147  is_mangled eCS-N.zip ?
3148[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3149  is_mangled_component eCS-N.zip (len 9) ?
3150[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:418(is_mangled)
3151  is_mangled eCS-N.zip ?
3152[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3153  is_mangled_component eCS-N.zip (len 9) ?
3154[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:418(is_mangled)
3155  is_mangled eCS-N.zip ?
3156[2016/12/15 15:45:49.756000, 10] smbd/mangle_hash2.c:357(is_mangled_component)
3157  is_mangled_component eCS-N.zip (len 9) ?
3158[2016/12/15 15:45:49.756000,  5] smbd/filename.c:805(unix_convert)
3159  New file eCS-N.zip
3160[2016/12/15 15:45:49.756000,  3] smbd/vfs.c:909(check_reduced_name)
3161  check_reduced_name [eCS-N.zip] [D:/]
3162[2016/12/15 15:45:49.756000, 10] smbd/vfs.c:973(check_reduced_name)
3163  check_reduced_name realpath [eCS-N.zip] -> [D:/eCS-N.zip]
3164[2016/12/15 15:45:49.756000,  3] smbd/vfs.c:1054(check_reduced_name)
3165  check_reduced_name: eCS-N.zip reduced to D:/eCS-N.zip
3166[2016/12/15 15:45:49.756000,  3] smbd/trans2.c:5372(call_trans2qfilepathinfo)
3167  call_trans2qfilepathinfo: SMB_VFS_STAT of eCS-N.zip failed (No such file or directory)
3168[2016/12/15 15:45:49.756000,  3] smbd/error.c:81(error_packet_set)
3169  error packet at smbd/trans2.c(5374) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
3170[2016/12/15 15:45:49.756000,  5] lib/util.c:332(show_msg)
3171[2016/12/15 15:45:49.756000,  5] lib/util.c:342(show_msg)
3172  size=35
3173  smb_com=0x32
3174  smb_rcls=52
3175  smb_reh=0
3176  smb_err=49152
3177  smb_flg=136
3178  smb_flg2=51203
3179  smb_tid=1
3180  smb_pid=29
3181  smb_uid=100
3182  smb_mid=8
3183  smt_wct=0
3184  smb_bcc=0
3185[2016/12/15 15:45:49.756000, 10] ../lib/util/util.c:415(dump_data)
3186[2016/12/15 15:45:49.760000, 10] lib/util_sock.c:519(read_smb_length_return_keepalive)
3187  got smb length of 106
3188[2016/12/15 15:45:49.760000,  6] smbd/process.c:1610(process_smb)
3189  got message type 0x0 of len 0x6a
3190[2016/12/15 15:45:49.760000,  3] smbd/process.c:1612(process_smb)
3191  Transaction 8 of length 110 (0 toread)
3192[2016/12/15 15:45:49.760000,  5] lib/util.c:332(show_msg)
3193[2016/12/15 15:45:49.760000,  5] lib/util.c:342(show_msg)
3194  size=106
3195  smb_com=0x6
3196  smb_rcls=0
3197  smb_reh=0
3198  smb_err=0
3199  smb_flg=8
3200  smb_flg2=51201
3201  smb_tid=1
3202  smb_pid=29
3203  smb_uid=100
3204  smb_mid=9
3205  smt_wct=1
3206  smb_vwv[ 0]=    6 (0x6)
3207  smb_bcc=69
3208[2016/12/15 15:45:49.760000, 10] ../lib/util/util.c:415(dump_data)
3209  [0000] 04 5C 00 74 00 65 00 6D   00 70 00 5C 00 66 00 6F   .\.t.e.m .p.\.f.o
3210  [0010] 00 62 00 6F 00 70 00 65   00 65 00 70 00 5C 00 32   .b.o.p.e .e.p.\.2
3211  [0020] 00 30 00 31 00 36 00 30   00 37 00 32 00 38 00 5C   .0.1.6.0 .7.2.8.\
3212  [0030] 00 65 00 43 00 53 00 2D   00 4E 00 2E 00 7A 00 69   .e.C.S.- .N...z.i
3213  [0040] 00 70 00 00 00                                    .p...
3214[2016/12/15 15:45:49.760000,  3] smbd/process.c:1417(switch_message)
3215  switch message SMBunlink (pid 158) conn 0x200d6790
3216[2016/12/15 15:45:49.760000,  4] smbd/uid.c:351(change_to_user)
3217  Skipping user change - already user
3218[2016/12/15 15:45:49.760000,  5] smbd/filename.c:257(unix_convert)
3219  unix_convert called on file "temp/fobopeep/20160728/eCS-N.zip"
3220[2016/12/15 15:45:49.760000, 10] smbd/statcache.c:244(stat_cache_lookup)
3221  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP/20160728/ECS-N.ZIP]
3222[2016/12/15 15:45:49.760000, 10] smbd/statcache.c:244(stat_cache_lookup)
3223  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP/20160728]
3224[2016/12/15 15:45:49.760000, 10] smbd/statcache.c:244(stat_cache_lookup)
3225  stat_cache_lookup: lookup failed for name [TEMP/FOBOPEEP]
3226[2016/12/15 15:45:49.760000, 10] smbd/statcache.c:244(stat_cache_lookup)
3227  stat_cache_lookup: lookup failed for name [TEMP]
3228[2016/12/15 15:45:49.760000,  5] smbd/filename.c:416(unix_convert)
3229  unix_convert begin: name = temp/fobopeep/20160728/eCS-N.zip, dirpath = , start = temp/fobopeep/20160728/eCS-N.zip
3230[2016/12/15 15:45:49.760000,  5] smbd/statcache.c:143(stat_cache_add)
3231  stat_cache_add: Added entry (200d06e0:size 20) TEMP/FOBOPEEP/20160728/ECS-N.ZIP -> temp/fobopeep/20160728/eCS-N.zip
3232[2016/12/15 15:45:49.760000,  5] smbd/filename.c:439(unix_convert)
3233  conversion of base_name finished temp/fobopeep/20160728/eCS-N.zip -> temp/fobopeep/20160728/eCS-N.zip
3234[2016/12/15 15:45:49.760000,  3] smbd/vfs.c:909(check_reduced_name)
3235  check_reduced_name [temp/fobopeep/20160728/eCS-N.zip] [D:/]
3236[2016/12/15 15:45:49.760000, 10] smbd/vfs.c:973(check_reduced_name)
3237  check_reduced_name realpath [temp/fobopeep/20160728/eCS-N.zip] -> [D:/Temp/fobopeep/20160728/eCS-N.zip]
3238[2016/12/15 15:45:49.760000,  3] smbd/vfs.c:1054(check_reduced_name)
3239  check_reduced_name: temp/fobopeep/20160728/eCS-N.zip reduced to D:/Temp/fobopeep/20160728/eCS-N.zip
3240[2016/12/15 15:45:49.760000,  3] smbd/reply.c:2813(reply_unlink)
3241  reply_unlink : temp/fobopeep/20160728/eCS-N.zip
3242[2016/12/15 15:45:49.760000,  3] smbd/vfs.c:909(check_reduced_name)
3243  check_reduced_name [temp/fobopeep/20160728/eCS-N.zip] [D:/]
3244[2016/12/15 15:45:49.760000, 10] smbd/vfs.c:973(check_reduced_name)
3245  check_reduced_name realpath [temp/fobopeep/20160728/eCS-N.zip] -> [D:/Temp/fobopeep/20160728/eCS-N.zip]
3246[2016/12/15 15:45:49.760000,  3] smbd/vfs.c:1054(check_reduced_name)
3247  check_reduced_name: temp/fobopeep/20160728/eCS-N.zip reduced to D:/Temp/fobopeep/20160728/eCS-N.zip
3248[2016/12/15 15:45:49.760000, 10] smbd/reply.c:2450(do_unlink)
3249  do_unlink: temp/fobopeep/20160728/eCS-N.zip, dirtype = 6
3250[2016/12/15 15:45:49.762000,  8] smbd/dosmode.c:645(dos_mode)
3251  dos_mode: temp/fobopeep/20160728/eCS-N.zip
3252[2016/12/15 15:45:49.762000,  5] lib/os2helper.c:294(unigetxattr)
3253  unigetxattr : (temp/fobopeep/20160728/eCS-N.zip:0) user.DOSATTRIB 56
3254[2016/12/15 15:45:49.762000, 10] smbd/dosmode.c:287(get_ea_dos_attribute)
3255  get_ea_dos_attribute: temp/fobopeep/20160728/eCS-N.zip attr = 0x20
3256[2016/12/15 15:45:49.762000, 10] smbd/dosmode.c:329(get_ea_dos_attribute)
3257  get_ea_dos_attribute: file temp/fobopeep/20160728/eCS-N.zip case 3 set btime Thu Jul 28 10:05:52 2016
3258 
3259[2016/12/15 15:45:49.762000,  8] smbd/dosmode.c:345(get_ea_dos_attribute)
3260  get_ea_dos_attribute returning (0x20)a
3261[2016/12/15 15:45:49.762000,  8] lib/util.c:1320(is_in_path)
3262  is_in_path: temp/fobopeep/20160728/eCS-N.zip
3263[2016/12/15 15:45:49.762000,  8] lib/util.c:1344(is_in_path)
3264  is_in_path: match not found
3265[2016/12/15 15:45:49.762000,  8] smbd/dosmode.c:696(dos_mode)
3266  dos_mode returning a
3267[2016/12/15 15:45:49.762000, 10] smbd/open.c:3675(create_file_default)
3268  create_file: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0, sd = 0x0, fname = temp/fobopeep/20160728/eCS-N.zip
3269[2016/12/15 15:45:49.762000, 10] smbd/open.c:3180(create_file_unixpath)
3270  create_file_unixpath: access_mask = 0x10000 file_attributes = 0x80, share_access = 0x0, create_disposition = 0x1 create_options = 0x40 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0, sd = 0x0, fname = temp/fobopeep/20160728/eCS-N.zip
3271[2016/12/15 15:45:49.762000, 10] smbd/posix_acls.c:3440(posix_get_nt_acl)
3272  posix_get_nt_acl: called for file temp/fobopeep/20160728
3273[2016/12/15 15:45:49.762000,  5] passdb/lookup_sid.c:1384(gid_to_sid)
3274  gid_to_sid: winbind failed to find a sid for gid 0
3275[2016/12/15 15:45:49.762000,  4] smbd/sec_ctx.c:214(push_sec_ctx)
3276  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
3277[2016/12/15 15:45:49.762000,  4] smbd/uid.c:460(push_conn_ctx)
3278  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
3279[2016/12/15 15:45:49.762000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
3280  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
3281[2016/12/15 15:45:49.762000,  5] ../libcli/security/security_token.c:53(security_token_debug)
3282  Security token: (NULL)
3283[2016/12/15 15:45:49.762000,  5] auth/token_util.c:527(debug_unix_user_token)
3284  UNIX token of user 0
3285  Primary group is 0 and contains 0 supplementary groups
3286[2016/12/15 15:45:49.762000,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
3287  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
3288[2016/12/15 15:45:49.764000, 10] passdb/lookup_sid.c:1181(legacy_gid_to_sid)
3289  LEGACY: gid 0 -> sid S-1-22-2-0
3290[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:2565(canonicalise_acl)
3291  canonicalise_acl: Access ace entries before arrange :
3292[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3293  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x
3294[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3295  canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (0) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x
3296[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3297  canon_ace index 2. Type = allow SID = S-1-5-21-2949345672-4033095365-296295443-1000 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
3298[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:848(print_canon_ace_list)
3299  print_canon_ace_list: canonicalise_acl: ace entries after arrange
3300  canon_ace index 0. Type = allow SID = S-1-5-21-2949345672-4033095365-296295443-1000 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
3301  canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (0) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x
3302  canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x
3303[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3304  map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff
3305[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3306  map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9
3307[2016/12/15 15:45:49.764000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3308  map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9
3309[2016/12/15 15:45:49.764000, 10] smbd/file_access.c:76(can_access_file_acl)
3310  can_access_file_acl for file temp/fobopeep/20160728 access_mask 0x40, access_granted 0x40 access DENIED
3311[2016/12/15 15:45:49.764000,  1] ../librpc/ndr/ndr.c:403(ndr_print_debug)
3312       secdesc: struct security_descriptor
3313          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
3314          type                     : 0x9004 (36868)
3315                 0: SEC_DESC_OWNER_DEFAULTED
3316                 0: SEC_DESC_GROUP_DEFAULTED
3317                 1: SEC_DESC_DACL_PRESENT   
3318                 0: SEC_DESC_DACL_DEFAULTED 
3319                 0: SEC_DESC_SACL_PRESENT   
3320                 0: SEC_DESC_SACL_DEFAULTED 
3321                 0: SEC_DESC_DACL_TRUSTED   
3322                 0: SEC_DESC_SERVER_SECURITY
3323                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
3324                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
3325                 0: SEC_DESC_DACL_AUTO_INHERITED
3326                 0: SEC_DESC_SACL_AUTO_INHERITED
3327                 1: SEC_DESC_DACL_PROTECTED 
3328                 0: SEC_DESC_SACL_PROTECTED 
3329                 0: SEC_DESC_RM_CONTROL_VALID
3330                 1: SEC_DESC_SELF_RELATIVE   
3331          owner_sid                : *
3332              owner_sid                : S-1-5-21-2949345672-4033095365-296295443-1000
3333          group_sid                : *
3334              group_sid                : S-1-22-2-0
3335          sacl                     : NULL
3336          dacl                     : *
3337              dacl: struct security_acl
3338                  revision                 : SECURITY_ACL_REVISION_NT4 (2)
3339                  size                     : 0x0058 (88)
3340                  num_aces                 : 0x00000003 (3)
3341                  aces: ARRAY(3)
3342                      aces: struct security_ace
3343                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3344                          flags                    : 0x00 (0)
3345                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3346                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3347                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3348                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3349                                 0: SEC_ACE_FLAG_INHERITED_ACE
3350                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3351                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3352                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3353                          size                     : 0x0024 (36)
3354                          access_mask              : 0x001f01ff (2032127)
3355                          object                   : union security_ace_object_ctr(case 0)
3356                          trustee                  : S-1-5-21-2949345672-4033095365-296295443-1000
3357                      aces: struct security_ace
3358                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3359                          flags                    : 0x00 (0)
3360                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3361                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3362                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3363                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3364                                 0: SEC_ACE_FLAG_INHERITED_ACE
3365                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3366                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3367                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3368                          size                     : 0x0018 (24)
3369                          access_mask              : 0x001200a9 (1179817)
3370                          object                   : union security_ace_object_ctr(case 0)
3371                          trustee                  : S-1-22-2-0
3372                      aces: struct security_ace
3373                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3374                          flags                    : 0x00 (0)
3375                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3376                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3377                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3378                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3379                                 0: SEC_ACE_FLAG_INHERITED_ACE
3380                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3381                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3382                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3383                          size                     : 0x0014 (20)
3384                          access_mask              : 0x001200a9 (1179817)
3385                          object                   : union security_ace_object_ctr(case 0)
3386                          trustee                  : S-1-1-0
3387[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:3440(posix_get_nt_acl)
3388  posix_get_nt_acl: called for file temp/fobopeep/20160728/eCS-N.zip
3389[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:2565(canonicalise_acl)
3390  canonicalise_acl: Access ace entries before arrange :
3391[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3392  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rw-
3393[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3394  canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (0) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw-
3395[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:2578(canonicalise_acl)
3396  canon_ace index 2. Type = allow SID = S-1-5-21-2949345672-4033095365-296295443-1000 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
3397[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:848(print_canon_ace_list)
3398  print_canon_ace_list: canonicalise_acl: ace entries after arrange
3399  canon_ace index 0. Type = allow SID = S-1-5-21-2949345672-4033095365-296295443-1000 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
3400  canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (0) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw-
3401  canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rw-
3402[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3403  map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1e01ff
3404[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3405  map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 12019f
3406[2016/12/15 15:45:49.766000, 10] smbd/posix_acls.c:1124(map_canon_ace_perms)
3407  map_canon_ace_perms: Mapped (UNIX) 180 to (NT) 12019f
3408[2016/12/15 15:45:49.766000, 10] smbd/file_access.c:76(can_access_file_acl)
3409  can_access_file_acl for file temp/fobopeep/20160728/eCS-N.zip access_mask 0x10000, access_granted 0x10000 access DENIED
3410[2016/12/15 15:45:49.766000,  1] ../librpc/ndr/ndr.c:403(ndr_print_debug)
3411       secdesc: struct security_descriptor
3412          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
3413          type                     : 0x9004 (36868)
3414                 0: SEC_DESC_OWNER_DEFAULTED
3415                 0: SEC_DESC_GROUP_DEFAULTED
3416                 1: SEC_DESC_DACL_PRESENT   
3417                 0: SEC_DESC_DACL_DEFAULTED 
3418                 0: SEC_DESC_SACL_PRESENT   
3419                 0: SEC_DESC_SACL_DEFAULTED 
3420                 0: SEC_DESC_DACL_TRUSTED   
3421                 0: SEC_DESC_SERVER_SECURITY
3422                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
3423                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
3424                 0: SEC_DESC_DACL_AUTO_INHERITED
3425                 0: SEC_DESC_SACL_AUTO_INHERITED
3426                 1: SEC_DESC_DACL_PROTECTED 
3427                 0: SEC_DESC_SACL_PROTECTED 
3428                 0: SEC_DESC_RM_CONTROL_VALID
3429                 1: SEC_DESC_SELF_RELATIVE   
3430          owner_sid                : *
3431              owner_sid                : S-1-5-21-2949345672-4033095365-296295443-1000
3432          group_sid                : *
3433              group_sid                : S-1-22-2-0
3434          sacl                     : NULL
3435          dacl                     : *
3436              dacl: struct security_acl
3437                  revision                 : SECURITY_ACL_REVISION_NT4 (2)
3438                  size                     : 0x0058 (88)
3439                  num_aces                 : 0x00000003 (3)
3440                  aces: ARRAY(3)
3441                      aces: struct security_ace
3442                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3443                          flags                    : 0x00 (0)
3444                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3445                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3446                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3447                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3448                                 0: SEC_ACE_FLAG_INHERITED_ACE
3449                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3450                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3451                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3452                          size                     : 0x0024 (36)
3453                          access_mask              : 0x001e01ff (1966591)
3454                          object                   : union security_ace_object_ctr(case 0)
3455                          trustee                  : S-1-5-21-2949345672-4033095365-296295443-1000
3456                      aces: struct security_ace
3457                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3458                          flags                    : 0x00 (0)
3459                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3460                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3461                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3462                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3463                                 0: SEC_ACE_FLAG_INHERITED_ACE
3464                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3465                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3466                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3467                          size                     : 0x0018 (24)
3468                          access_mask              : 0x0012019f (1180063)
3469                          object                   : union security_ace_object_ctr(case 0)
3470                          trustee                  : S-1-22-2-0
3471                      aces: struct security_ace
3472                          type                     : SEC_ACE_TYPE_ACCESS_ALLOWED (0)
3473                          flags                    : 0x00 (0)
3474                                 0: SEC_ACE_FLAG_OBJECT_INHERIT
3475                                 0: SEC_ACE_FLAG_CONTAINER_INHERIT
3476                                 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT
3477                                 0: SEC_ACE_FLAG_INHERIT_ONLY
3478                                 0: SEC_ACE_FLAG_INHERITED_ACE
3479                              0x00: SEC_ACE_FLAG_VALID_INHERIT (0)
3480                                 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS
3481                                 0: SEC_ACE_FLAG_FAILED_ACCESS
3482                          size                     : 0x0014 (20)
3483                          access_mask              : 0x0012019f (1180063)
3484                          object                   : union security_ace_object_ctr(case 0)
3485                          trustee                  : S-1-1-0
3486[2016/12/15 15:45:49.768000, 10] smbd/open.c:3226(create_file_unixpath)
3487  create_file_unixpath: open file temp/fobopeep/20160728/eCS-N.zip for delete ACCESS_DENIED
3488[2016/12/15 15:45:49.768000, 10] smbd/open.c:3499(create_file_unixpath)
3489  create_file_unixpath: NT_STATUS_ACCESS_DENIED
3490[2016/12/15 15:45:49.768000, 10] smbd/open.c:3772(create_file_default)
3491  create_file: NT_STATUS_ACCESS_DENIED
3492[2016/12/15 15:45:49.768000, 10] smbd/reply.c:2543(do_unlink)
3493  SMB_VFS_CREATEFILE failed: NT_STATUS_ACCESS_DENIED
3494[2016/12/15 15:45:49.768000,  3] smbd/error.c:81(error_packet_set)
3495  error packet at smbd/reply.c(2822) cmd=6 (SMBunlink) NT_STATUS_ACCESS_DENIED
3496[2016/12/15 15:45:49.768000,  5] lib/util.c:332(show_msg)
3497[2016/12/15 15:45:49.768000,  5] lib/util.c:342(show_msg)
3498  size=35
3499  smb_com=0x6
3500  smb_rcls=34
3501  smb_reh=0
3502  smb_err=49152
3503  smb_flg=136
3504  smb_flg2=51203
3505  smb_tid=1
3506  smb_pid=29
3507  smb_uid=100
3508  smb_mid=9
3509  smt_wct=0
3510  smb_bcc=0
3511[2016/12/15 15:45:49.768000, 10] ../lib/util/util.c:415(dump_data)
3512[2016/12/15 15:45:59.305000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
3513  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
3514[2016/12/15 15:45:59.305000,  5] ../libcli/security/security_token.c:53(security_token_debug)
3515  Security token: (NULL)
3516[2016/12/15 15:45:59.305000,  5] auth/token_util.c:527(debug_unix_user_token)
3517  UNIX token of user 0
3518  Primary group is 0 and contains 0 supplementary groups
3519[2016/12/15 15:45:59.305000,  5] smbd/uid.c:400(change_to_root_user)
3520  change_to_root_user: now uid=(0,0) gid=(0,0)
3521[2016/12/15 15:45:59.305000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
3522  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
3523[2016/12/15 15:45:59.305000,  5] ../libcli/security/security_token.c:53(security_token_debug)
3524  Security token: (NULL)
3525[2016/12/15 15:45:59.305000,  5] auth/token_util.c:527(debug_unix_user_token)
3526  UNIX token of user 0
3527  Primary group is 0 and contains 0 supplementary groups
3528[2016/12/15 15:45:59.305000,  5] smbd/uid.c:400(change_to_root_user)
3529  change_to_root_user: now uid=(0,0) gid=(0,0)
3530[2016/12/15 15:45:59.305000,  1] smbd/service.c:1383(close_cnum)
3531  serbopeep (192.168.46.19) closed connection to service JFS
3532[2016/12/15 15:45:59.305000,  3] smbd/connection.c:35(yield_connection)
3533  Yielding connection to JFS
3534[2016/12/15 15:45:59.305000, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
3535  Locking key 9E000000FFFFFFFFB238
3536[2016/12/15 15:45:59.305000, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
3537  Allocated locked data 0x200d0490
3538[2016/12/15 15:45:59.305000, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
3539  Unlocking key 9E000000FFFFFFFFB238
3540[2016/12/15 15:45:59.305000,  4] smbd/vfs.c:784(vfs_ChDir)
3541  vfs_ChDir to /
3542[2016/12/15 15:45:59.305000,  4] smbd/sec_ctx.c:314(set_sec_ctx)
3543  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
3544[2016/12/15 15:45:59.305000,  5] ../libcli/security/security_token.c:53(security_token_debug)
3545  Security token: (NULL)
3546[2016/12/15 15:45:59.305000,  5] auth/token_util.c:527(debug_unix_user_token)
3547  UNIX token of user 0
3548  Primary group is 0 and contains 0 supplementary groups
3549[2016/12/15 15:45:59.305000,  5] smbd/uid.c:400(change_to_root_user)
3550  change_to_root_user: now uid=(0,0) gid=(0,0)
3551[2016/12/15 15:45:59.305000,  5] lib/messages.c:332(messaging_deregister)
3552  Deregistering messaging pointer for type 784 - private_data=200cedf0
3553[2016/12/15 15:45:59.305000, 10] lib/dbwrap_tdb.c:102(db_tdb_fetch_locked)
3554  Locking key 49442F3135382F313030
3555[2016/12/15 15:45:59.305000, 10] lib/dbwrap_tdb.c:131(db_tdb_fetch_locked)
3556  Allocated locked data 0x200d74f0
3557[2016/12/15 15:45:59.307000, 10] lib/dbwrap_tdb.c:44(db_tdb_record_destr)
3558  Unlocking key 49442F3135382F313030
3559[2016/12/15 15:45:59.307000,  3] smbd/server_exit.c:181(exit_server_common)
3560  Server exit (termination signal)