[2012/09/03 15:32:11.700920, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service IPC$ [2012/09/03 15:32:11.751552, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:32:41.792504, 3] smbd/process.c:1662(process_smb) Transaction 38 of length 70 (0 toread) [2012/09/03 15:32:41.792609, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7185) conn 0x0 [2012/09/03 15:32:41.792679, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.125 (192.168.1.125) [2012/09/03 15:32:41.792722, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:32:41.792763, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:32:41.792785, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:32:41.792859, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.125) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 7185) [2012/09/03 15:32:41.792893, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:32:41.793690, 3] smbd/process.c:1662(process_smb) Transaction 39 of length 120 (0 toread) [2012/09/03 15:32:41.793732, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:41.793788, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/03 15:32:41.793828, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:32:41.793854, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/03 15:32:41.793875, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/03 15:32:41.793934, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/03 15:32:43.777472, 3] smbd/process.c:1662(process_smb) Transaction 40 of length 39 (0 toread) [2012/09/03 15:32:43.777613, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:43.777704, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service IPC$ [2012/09/03 15:32:43.777768, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:32:44.569283, 3] smbd/process.c:1662(process_smb) Transaction 41 of length 70 (0 toread) [2012/09/03 15:32:44.569449, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7185) conn 0x0 [2012/09/03 15:32:44.569591, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.125 (192.168.1.125) [2012/09/03 15:32:44.569722, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:32:44.569842, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:32:44.569918, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:32:44.570151, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.125) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7185) [2012/09/03 15:32:44.570303, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:32:44.571180, 3] smbd/process.c:1662(process_smb) Transaction 42 of length 113 (0 toread) [2012/09/03 15:32:44.571282, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:44.571454, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2012/09/03 15:32:44.571539, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:32:44.571610, 3] smbd/lanman.c:5846(api_reply) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=4096,mprcnt=8) [2012/09/03 15:32:44.571685, 3] smbd/lanman.c:5850(api_reply) Doing RNetShareEnum [2012/09/03 15:32:44.571940, 3] smbd/lanman.c:2156(api_RNetShareEnum) RNetShareEnum gave 5 entries of 5 (1 4096 182 4096) [2012/09/03 15:32:45.782042, 3] smbd/process.c:1662(process_smb) Transaction 43 of length 39 (0 toread) [2012/09/03 15:32:45.782187, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:45.782269, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service IPC$ [2012/09/03 15:32:45.782337, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:32:51.991318, 3] smbd/process.c:1662(process_smb) Transaction 44 of length 70 (0 toread) [2012/09/03 15:32:51.991471, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7185) conn 0x0 [2012/09/03 15:32:51.991578, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.125 (192.168.1.125) [2012/09/03 15:32:51.991673, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:32:51.991761, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:32:51.991832, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:32:51.992060, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.125) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7185) [2012/09/03 15:32:51.992168, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:32:51.992817, 3] smbd/process.c:1662(process_smb) Transaction 45 of length 147 (0 toread) [2012/09/03 15:32:51.992902, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:51.992990, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:32:51.993050, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:32:51.993100, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:32:51.993153, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:32:51.993205, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:32:51.993334, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:32:51.993439, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.125 (192.168.1.125) [2012/09/03 15:32:51.994298, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.994420, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.995099, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:32:51.995185, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.995260, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.996592, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.996685, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.996765, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.996842, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.997041, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:32:51.999024, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999102, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999135, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999167, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999215, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:32:51.999840, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999880, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999913, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:51.999943, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:52.000007, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:32:52.000040, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:32:53.801163, 3] smbd/process.c:1662(process_smb) Transaction 46 of length 39 (0 toread) [2012/09/03 15:32:53.801303, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7185) conn 0xb80f27b8 [2012/09/03 15:32:53.801402, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service IPC$ [2012/09/03 15:32:53.801482, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:36:43.106112, 3] smbd/process.c:1662(process_smb) Transaction 47 of length 39 (0 toread) [2012/09/03 15:36:43.106246, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7185) conn 0xb80ee6e8 [2012/09/03 15:36:43.106337, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service Merlin [2012/09/03 15:36:43.106401, 3] smbd/connection.c:35(yield_connection) Yielding connection to Merlin [2012/09/03 15:36:43.108174, 3] smbd/process.c:1662(process_smb) Transaction 48 of length 39 (0 toread) [2012/09/03 15:36:43.108221, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7185) conn 0xb80f2b10 [2012/09/03 15:36:43.108273, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.125) closed connection to service Win95 [2012/09/03 15:36:43.108315, 3] smbd/connection.c:35(yield_connection) Yielding connection to Win95 [2012/09/03 15:36:43.109559, 3] smbd/server_exit.c:180(exit_server_common) Server exit (failed to receive smb request) [2012/09/03 15:37:01.136323, 3] smbd/process.c:1662(process_smb) Transaction 0 of length 158 (0 toread) [2012/09/03 15:37:01.136374, 3] smbd/process.c:1467(switch_message) switch message SMBnegprot (pid 7225) conn 0x0 [2012/09/03 15:37:01.136658, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2012/09/03 15:37:01.136697, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2012/09/03 15:37:01.136719, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LM1.2X002] [2012/09/03 15:37:01.136740, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LANMAN2.1] [2012/09/03 15:37:01.136761, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2012/09/03 15:37:01.136781, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [NT LM 0.12] [2012/09/03 15:37:01.136872, 3] smbd/negprot.c:401(reply_nt1) not using SPNEGO [2012/09/03 15:37:01.136905, 3] smbd/negprot.c:704(reply_negprot) Selected protocol NT LM 0.12 [2012/09/03 15:37:01.139229, 3] smbd/process.c:1662(process_smb) Transaction 1 of length 164 (0 toread) [2012/09/03 15:37:01.139290, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7225) conn 0x0 [2012/09/03 15:37:01.139346, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 15:37:01.139393, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[MYGROUP] NativeOS=[Windows 4.0] NativeLanMan=[Windows 4.0] PrimaryDomain=[null] [2012/09/03 15:37:01.139426, 2] smbd/sesssetup.c:1279(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2012/09/03 15:37:01.139456, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[MYGROUP]\[CRLB]@[win95] [2012/09/03 15:37:01.139528, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MYGROUP]\[CRLB]@[win95] with the new password interface [2012/09/03 15:37:01.139573, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: [CHIMPANZEE]\[CRLB]@[win95] [2012/09/03 15:37:01.139888, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:37:01.140254, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [CRLB] succeeded [2012/09/03 15:37:01.140291, 2] auth/auth.c:309(check_ntlm_password) check_ntlm_password: authentication for user [CRLB] -> [CRLB] -> [crlb] succeeded [2012/09/03 15:37:01.140360, 3] auth/token_util.c:438(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 15:37:01.140413, 3] auth/token_util.c:469(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 15:37:01.140752, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: crlb Real name: Colin Leavett-Brown [2012/09/03 15:37:01.140781, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 1000 is UNIX user crlb, and will be vuid 100 [2012/09/03 15:37:01.140843, 3] smbd/password.c:238(register_homes_share) Adding homes service for user 'crlb' using home directory: '/home/crlb' [2012/09/03 15:37:01.140886, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7225) conn 0x0 [2012/09/03 15:37:01.140926, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:01.140967, 3] smbd/service.c:837(make_connection_snum) Connect path is '/var/spool/samba' for service [Merlin] [2012/09/03 15:37:01.141011, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:37:01.141038, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:37:01.141141, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Merlin initially as user crlb (uid=1000, gid=1000) (pid 7225) [2012/09/03 15:37:01.141175, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=MERLIN [2012/09/03 15:37:01.147144, 3] smbd/process.c:1662(process_smb) Transaction 2 of length 70 (0 toread) [2012/09/03 15:37:01.147196, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7225) conn 0x0 [2012/09/03 15:37:01.147237, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:01.147266, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 15:37:01.147348, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:37:01.147425, 3] smbd/service.c:837(make_connection_snum) Connect path is '/home/crlb/Win95' for service [Win95] [2012/09/03 15:37:01.147462, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:37:01.147483, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:37:01.147549, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 15:37:01.147616, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:37:01.147712, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Win95 initially as user crlb (uid=1000, gid=1000) (pid 7225) [2012/09/03 15:37:01.147746, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=WIN95 [2012/09/03 15:37:02.020151, 3] smbd/process.c:1662(process_smb) Transaction 3 of length 90 (0 toread) [2012/09/03 15:37:02.020259, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 7225) conn 0xb80ee6e8 [2012/09/03 15:37:02.020333, 3] smbd/trans2.c:3513(call_trans2qfsinfo) call_trans2qfsinfo: level = 261 [2012/09/03 15:37:02.020366, 3] smbd/trans2.c:2951(smbd_do_qfsinfo) smbd_do_qfsinfo: level = 261 [2012/09/03 15:37:02.059862, 3] smbd/process.c:1662(process_smb) Transaction 4 of length 133 (0 toread) [2012/09/03 15:37:02.059923, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7225) conn 0x0 [2012/09/03 15:37:02.059975, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 15:37:02.060020, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[] NativeOS=[MYGROUP] NativeLanMan=[Windows 4.0] PrimaryDomain=[Windows 4.0] [2012/09/03 15:37:02.060050, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[win95] [2012/09/03 15:37:02.060102, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2012/09/03 15:37:02.060134, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2012/09/03 15:37:02.060154, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2012/09/03 15:37:02.060182, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2012/09/03 15:37:02.060210, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: nobody Real name: (null) [2012/09/03 15:37:02.060231, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2012/09/03 15:37:02.060264, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7225) conn 0x0 [2012/09/03 15:37:02.060303, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:02.060343, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:37:02.060384, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:37:02.060406, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:37:02.060477, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 7225) [2012/09/03 15:37:02.060508, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:37:02.079058, 3] smbd/process.c:1662(process_smb) Transaction 5 of length 120 (0 toread) [2012/09/03 15:37:02.079133, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7225) conn 0xb80ec7b0 [2012/09/03 15:37:02.079204, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/03 15:37:02.079236, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:37:02.079257, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/03 15:37:02.079279, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/03 15:37:02.079352, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/03 15:37:02.411038, 3] smbd/process.c:1662(process_smb) Transaction 6 of length 147 (0 toread) [2012/09/03 15:37:02.411178, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7225) conn 0xb80ec7b0 [2012/09/03 15:37:02.411326, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:37:02.411390, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:37:02.411439, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:37:02.411490, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:37:02.411547, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:37:02.411743, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:37:02.411885, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:02.412856, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.412945, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.413585, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:37:02.413668, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.413741, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.415160, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.415202, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.415234, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.415265, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.415405, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:37:02.415982, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.416021, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.416054, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.416084, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.416141, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:37:02.417049, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.417102, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.417145, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.417189, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.417296, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:02.417345, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:37:04.536623, 3] smbd/process.c:1662(process_smb) Transaction 7 of length 39 (0 toread) [2012/09/03 15:37:04.536737, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7225) conn 0xb80ec7b0 [2012/09/03 15:37:04.536786, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:37:04.536815, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:37:06.219211, 3] smbd/process.c:1662(process_smb) Transaction 8 of length 72 (0 toread) [2012/09/03 15:37:06.219314, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7225) conn 0xb80ef738 [2012/09/03 15:37:06.219414, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:37:06.219459, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:37:06.219638, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:37:06.219727, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:06.220229, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.220271, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.220334, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:37:06.220358, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.220397, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:37:06.223124, 3] smbd/process.c:1662(process_smb) Transaction 9 of length 72 (0 toread) [2012/09/03 15:37:06.223189, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7225) conn 0xb80ef738 [2012/09/03 15:37:06.223248, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:37:06.223285, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:37:06.223408, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:37:06.223456, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:06.223794, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.223833, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.223893, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:37:06.223917, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:37:06.223947, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:37:10.896407, 3] smbd/process.c:1662(process_smb) Transaction 10 of length 70 (0 toread) [2012/09/03 15:37:10.896516, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7225) conn 0x0 [2012/09/03 15:37:10.896600, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:37:10.896668, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:37:10.896732, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:37:10.896766, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:37:10.896873, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7225) [2012/09/03 15:37:10.896920, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:37:10.897353, 3] smbd/process.c:1662(process_smb) Transaction 11 of length 113 (0 toread) [2012/09/03 15:37:10.897397, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7225) conn 0xb80ec7b0 [2012/09/03 15:37:10.897452, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2012/09/03 15:37:10.897488, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:37:10.897518, 3] smbd/lanman.c:5846(api_reply) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=4096,mprcnt=8) [2012/09/03 15:37:10.897550, 3] smbd/lanman.c:5850(api_reply) Doing RNetShareEnum [2012/09/03 15:37:10.897678, 3] smbd/lanman.c:2156(api_RNetShareEnum) RNetShareEnum gave 5 entries of 5 (1 4096 182 4096) [2012/09/03 15:37:13.557378, 3] smbd/process.c:1662(process_smb) Transaction 12 of length 39 (0 toread) [2012/09/03 15:37:13.557516, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7225) conn 0xb80ec7b0 [2012/09/03 15:37:13.557601, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:37:13.557665, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:38:15.477122, 3] smbd/process.c:1662(process_smb) Transaction 13 of length 39 (0 toread) [2012/09/03 15:38:15.477257, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7225) conn 0xb80ef738 [2012/09/03 15:38:15.477348, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Merlin [2012/09/03 15:38:15.477412, 3] smbd/connection.c:35(yield_connection) Yielding connection to Merlin [2012/09/03 15:38:15.479769, 3] smbd/process.c:1662(process_smb) Transaction 14 of length 39 (0 toread) [2012/09/03 15:38:15.479867, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7225) conn 0xb80ee6e8 [2012/09/03 15:38:15.479965, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Win95 [2012/09/03 15:38:15.480062, 3] smbd/connection.c:35(yield_connection) Yielding connection to Win95 [2012/09/03 15:38:15.483410, 3] smbd/server_exit.c:180(exit_server_common) Server exit (failed to receive smb request) [2012/09/03 15:38:34.253439, 3] smbd/process.c:1662(process_smb) Transaction 0 of length 158 (0 toread) [2012/09/03 15:38:34.253493, 3] smbd/process.c:1467(switch_message) switch message SMBnegprot (pid 7231) conn 0x0 [2012/09/03 15:38:34.253828, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2012/09/03 15:38:34.253877, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2012/09/03 15:38:34.253905, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LM1.2X002] [2012/09/03 15:38:34.253931, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LANMAN2.1] [2012/09/03 15:38:34.253957, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2012/09/03 15:38:34.253983, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [NT LM 0.12] [2012/09/03 15:38:34.254094, 3] smbd/negprot.c:401(reply_nt1) not using SPNEGO [2012/09/03 15:38:34.254125, 3] smbd/negprot.c:704(reply_negprot) Selected protocol NT LM 0.12 [2012/09/03 15:38:34.256515, 3] smbd/process.c:1662(process_smb) Transaction 1 of length 164 (0 toread) [2012/09/03 15:38:34.256561, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7231) conn 0x0 [2012/09/03 15:38:34.256607, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 15:38:34.256654, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[MYGROUP] NativeOS=[Windows 4.0] NativeLanMan=[Windows 4.0] PrimaryDomain=[null] [2012/09/03 15:38:34.256692, 2] smbd/sesssetup.c:1279(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2012/09/03 15:38:34.256719, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[MYGROUP]\[CRLB]@[win95] [2012/09/03 15:38:34.256784, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MYGROUP]\[CRLB]@[win95] with the new password interface [2012/09/03 15:38:34.256816, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: [CHIMPANZEE]\[CRLB]@[win95] [2012/09/03 15:38:34.257095, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:38:34.257556, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [CRLB] succeeded [2012/09/03 15:38:34.257598, 2] auth/auth.c:309(check_ntlm_password) check_ntlm_password: authentication for user [CRLB] -> [CRLB] -> [crlb] succeeded [2012/09/03 15:38:34.257683, 3] auth/token_util.c:438(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 15:38:34.257750, 3] auth/token_util.c:469(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 15:38:34.258233, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: crlb Real name: Colin Leavett-Brown [2012/09/03 15:38:34.258268, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 1000 is UNIX user crlb, and will be vuid 100 [2012/09/03 15:38:34.258340, 3] smbd/password.c:238(register_homes_share) Adding homes service for user 'crlb' using home directory: '/home/crlb' [2012/09/03 15:38:34.258392, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:38:34.258441, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:34.258490, 3] smbd/service.c:837(make_connection_snum) Connect path is '/var/spool/samba' for service [Merlin] [2012/09/03 15:38:34.258541, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:38:34.258574, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:38:34.258711, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Merlin initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:38:34.258752, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=MERLIN [2012/09/03 15:38:34.264241, 3] smbd/process.c:1662(process_smb) Transaction 2 of length 70 (0 toread) [2012/09/03 15:38:34.264318, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:38:34.264383, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:34.264423, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 15:38:34.264532, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:38:34.264633, 3] smbd/service.c:837(make_connection_snum) Connect path is '/home/crlb/Win95' for service [Win95] [2012/09/03 15:38:34.264678, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:38:34.264706, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:38:34.264789, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 15:38:34.264874, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 15:38:34.265000, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Win95 initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:38:34.265041, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=WIN95 [2012/09/03 15:38:35.066739, 3] smbd/process.c:1662(process_smb) Transaction 3 of length 90 (0 toread) [2012/09/03 15:38:35.066850, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 7231) conn 0xb80f2b10 [2012/09/03 15:38:35.066938, 3] smbd/trans2.c:3513(call_trans2qfsinfo) call_trans2qfsinfo: level = 261 [2012/09/03 15:38:35.067027, 3] smbd/trans2.c:2951(smbd_do_qfsinfo) smbd_do_qfsinfo: level = 261 [2012/09/03 15:38:35.116234, 3] smbd/process.c:1662(process_smb) Transaction 4 of length 133 (0 toread) [2012/09/03 15:38:35.116292, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7231) conn 0x0 [2012/09/03 15:38:35.116343, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 15:38:35.116393, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[] NativeOS=[MYGROUP] NativeLanMan=[Windows 4.0] PrimaryDomain=[Windows 4.0] [2012/09/03 15:38:35.116428, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[win95] [2012/09/03 15:38:35.116537, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2012/09/03 15:38:35.116587, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2012/09/03 15:38:35.116622, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2012/09/03 15:38:35.116665, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2012/09/03 15:38:35.116711, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: nobody Real name: (null) [2012/09/03 15:38:35.116748, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2012/09/03 15:38:35.116803, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:38:35.116863, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:35.116923, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:38:35.117024, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:38:35.117074, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:38:35.117180, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 7231) [2012/09/03 15:38:35.117229, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:38:35.119556, 3] smbd/process.c:1662(process_smb) Transaction 5 of length 120 (0 toread) [2012/09/03 15:38:35.119607, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:38:35.119666, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/03 15:38:35.119709, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:38:35.119746, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/03 15:38:35.119785, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/03 15:38:35.119890, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/03 15:38:35.428332, 3] smbd/process.c:1662(process_smb) Transaction 6 of length 147 (0 toread) [2012/09/03 15:38:35.428439, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:38:35.428554, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:38:35.428597, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:38:35.428629, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:38:35.428664, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:38:35.428726, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:38:35.428862, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:38:35.428965, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:35.429612, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.429714, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.430133, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:38:35.430187, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.430238, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.431263, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.431322, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.431374, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.431427, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.431647, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:38:35.432575, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.432634, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.432688, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.432738, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.432812, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:38:35.433784, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.433840, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.433903, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.433956, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.434072, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:35.434123, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:38:37.462459, 3] smbd/process.c:1662(process_smb) Transaction 7 of length 72 (0 toread) [2012/09/03 15:38:37.462562, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:38:37.462647, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:38:37.462678, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:38:37.462816, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:38:37.462879, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:37.463263, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.463304, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.463366, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:38:37.463391, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.463429, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:38:37.465407, 3] smbd/process.c:1662(process_smb) Transaction 8 of length 72 (0 toread) [2012/09/03 15:38:37.465451, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:38:37.465493, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:38:37.465537, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:38:37.465620, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:38:37.465662, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:37.465969, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.466008, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.466068, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:38:37.466092, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:37.466122, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:38:37.803735, 3] smbd/process.c:1662(process_smb) Transaction 9 of length 39 (0 toread) [2012/09/03 15:38:37.803863, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:38:37.803962, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:38:37.804026, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:38:45.820116, 3] smbd/process.c:1662(process_smb) Transaction 10 of length 70 (0 toread) [2012/09/03 15:38:45.820228, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:38:45.820301, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:45.820348, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:38:45.820393, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:38:45.820416, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:38:45.820502, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:38:45.820538, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:38:45.820874, 3] smbd/process.c:1662(process_smb) Transaction 11 of length 147 (0 toread) [2012/09/03 15:38:45.820921, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:38:45.820980, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:38:45.821020, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:38:45.821043, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:38:45.821064, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:38:45.821085, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:38:45.821148, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:38:45.821195, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:45.821562, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.821602, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.821858, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:38:45.821894, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.821924, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.822479, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.822520, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.822552, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.822583, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.822634, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:38:45.823212, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.823253, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.823286, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.823317, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.823363, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:38:45.823938, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.823978, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.824010, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.824041, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.824106, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.824139, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:38:45.827574, 3] smbd/process.c:1662(process_smb) Transaction 12 of length 72 (0 toread) [2012/09/03 15:38:45.827628, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:38:45.827691, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:38:45.827738, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:38:45.827888, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:38:45.827967, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:45.828337, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.828378, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.828438, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:38:45.828462, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.828496, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:38:45.829594, 3] smbd/process.c:1662(process_smb) Transaction 13 of length 72 (0 toread) [2012/09/03 15:38:45.829642, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:38:45.829687, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:38:45.829732, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:38:45.829817, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:38:45.829859, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:38:45.830170, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.830209, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.830269, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:38:45.830293, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:38:45.830322, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:38:47.827143, 3] smbd/process.c:1662(process_smb) Transaction 14 of length 39 (0 toread) [2012/09/03 15:38:47.827264, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:38:47.827341, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:38:47.827394, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:01.486669, 3] smbd/process.c:1662(process_smb) Transaction 15 of length 70 (0 toread) [2012/09/03 15:39:01.486780, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:01.486853, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:01.486901, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:01.486946, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:01.486980, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:01.487060, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:01.487095, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:01.487705, 3] smbd/process.c:1662(process_smb) Transaction 16 of length 113 (0 toread) [2012/09/03 15:39:01.487752, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:01.487811, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2012/09/03 15:39:01.487852, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:01.487876, 3] smbd/lanman.c:5846(api_reply) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=4096,mprcnt=8) [2012/09/03 15:39:01.487897, 3] smbd/lanman.c:5850(api_reply) Doing RNetShareEnum [2012/09/03 15:39:01.487998, 3] smbd/lanman.c:2156(api_RNetShareEnum) RNetShareEnum gave 5 entries of 5 (1 4096 182 4096) [2012/09/03 15:39:03.865925, 3] smbd/process.c:1662(process_smb) Transaction 17 of length 39 (0 toread) [2012/09/03 15:39:03.866062, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:03.866145, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:03.866209, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:18.990870, 3] smbd/process.c:1662(process_smb) Transaction 18 of length 70 (0 toread) [2012/09/03 15:39:18.991076, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:18.991226, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:18.991362, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:18.991487, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:18.991564, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:18.991799, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:18.991905, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:18.993020, 3] smbd/process.c:1662(process_smb) Transaction 19 of length 147 (0 toread) [2012/09/03 15:39:18.993121, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:18.993246, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:39:18.993337, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:18.993411, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:18.993488, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:18.993563, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:39:18.993737, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:18.993883, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:18.995209, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.995337, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.996331, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:18.996439, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.996550, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.998717, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.998842, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.998958, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.999096, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:18.999234, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.000129, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.000184, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.000232, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.000279, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.000348, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.001298, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.001353, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.001401, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.001447, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.001545, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.001591, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:19.004921, 3] smbd/process.c:1662(process_smb) Transaction 20 of length 115 (0 toread) [2012/09/03 15:39:19.004992, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:19.005036, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:19.005070, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:19.005100, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:19.005131, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:19.005163, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:19.005243, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:19.005313, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:19.005842, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.005896, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.006300, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:19.006347, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.006394, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.007290, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.007346, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.007394, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.007442, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.007513, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.008411, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.008465, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.008514, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.008561, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.008630, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.009614, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.009668, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.009716, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.009763, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.009854, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.009899, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:19.010348, 3] smbd/process.c:1662(process_smb) Transaction 21 of length 128 (0 toread) [2012/09/03 15:39:19.010392, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:19.010440, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:19.010475, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:19.010505, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:19.010535, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:19.010566, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:19.010633, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:19.010692, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:19.011214, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.011270, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.011671, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:19.011719, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.011764, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.012642, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.012696, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.012744, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.012792, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.012861, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.013759, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.013813, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.013862, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.013909, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.013979, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.014916, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.014976, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.015029, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.015077, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.015174, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.016217, 3] smbd/process.c:1662(process_smb) Transaction 22 of length 147 (0 toread) [2012/09/03 15:39:19.016263, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:19.016303, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:39:19.016339, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:19.016368, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=1000,mprcnt=6) [2012/09/03 15:39:19.016398, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:19.016429, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:39:19.016496, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:19.016555, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:19.017041, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.017102, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.017507, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:19.017554, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.017599, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.018477, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.018531, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.018579, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.018627, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.018696, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.019635, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.019692, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.019741, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.019787, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.019859, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.020806, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.020861, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.020910, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.020957, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.021054, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.849130, 3] smbd/process.c:1662(process_smb) Transaction 23 of length 115 (0 toread) [2012/09/03 15:39:19.849272, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:19.849340, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:19.849396, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:19.849444, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:19.849494, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:19.849546, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:19.849677, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:19.849789, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:19.850660, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.850752, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851220, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:19.851258, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851289, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851838, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851878, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851911, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851941, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.851993, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.852552, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.852592, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.852624, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.852655, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.852701, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.853280, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.853320, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.853352, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.853382, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.853446, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.853478, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:19.854004, 3] smbd/process.c:1662(process_smb) Transaction 24 of length 128 (0 toread) [2012/09/03 15:39:19.854047, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:19.854088, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:19.854127, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:19.854156, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:19.854177, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:19.854198, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:19.854258, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:19.854298, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:19.854608, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.854646, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.854902, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:19.854936, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.854973, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.855585, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.855626, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.855659, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.855690, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.855737, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.856288, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.856327, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.856359, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.856389, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.856436, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:19.857004, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.857044, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.857076, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.857107, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:19.857174, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:21.908457, 3] smbd/process.c:1662(process_smb) Transaction 25 of length 39 (0 toread) [2012/09/03 15:39:21.908619, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:21.908735, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:21.908834, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:29.023608, 3] smbd/process.c:1662(process_smb) Transaction 26 of length 70 (0 toread) [2012/09/03 15:39:29.023756, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:29.023861, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:29.023954, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:29.024040, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:29.024092, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:29.024250, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:29.024326, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:29.025645, 3] smbd/process.c:1662(process_smb) Transaction 27 of length 115 (0 toread) [2012/09/03 15:39:29.025740, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:29.025840, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:29.025899, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:29.025950, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:29.026001, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:29.026052, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:29.026176, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:29.026275, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:29.027114, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.027207, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.027833, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:29.027915, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.027989, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.029325, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.029415, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.029494, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.029569, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.029684, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.031123, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031165, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031197, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031228, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031284, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.031858, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031898, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031930, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.031961, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.032023, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.032056, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:29.032560, 3] smbd/process.c:1662(process_smb) Transaction 28 of length 128 (0 toread) [2012/09/03 15:39:29.032604, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:29.032646, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:29.032685, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:29.032714, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:29.032735, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:29.032755, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:29.032801, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:29.032840, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:29.033150, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.033189, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.033443, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:29.033477, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.033507, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034043, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034082, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034114, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034145, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034191, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.034746, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034785, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034818, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034848, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.034894, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.035490, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.035530, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.035562, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.035593, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.035656, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.036783, 3] smbd/process.c:1662(process_smb) Transaction 29 of length 147 (0 toread) [2012/09/03 15:39:29.036837, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:29.036880, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:39:29.036924, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:29.036947, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=1000,mprcnt=6) [2012/09/03 15:39:29.036967, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:29.036987, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:39:29.037037, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:29.037078, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:29.037400, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.037452, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.037811, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:29.037863, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.037906, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.038574, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.038616, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.038649, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.038679, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.038729, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.039300, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.039340, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.039373, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.039403, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.039450, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:29.040086, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.040127, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.040160, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.040191, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:29.040255, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:30.929889, 3] smbd/process.c:1662(process_smb) Transaction 30 of length 39 (0 toread) [2012/09/03 15:39:30.930030, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:30.930131, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:30.930218, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:34.008934, 3] smbd/process.c:1662(process_smb) Transaction 31 of length 70 (0 toread) [2012/09/03 15:39:34.009099, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:34.009215, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:34.009309, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:34.009396, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:34.009450, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:34.009607, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:34.009697, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:34.010355, 3] smbd/process.c:1662(process_smb) Transaction 32 of length 115 (0 toread) [2012/09/03 15:39:34.010441, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:34.010542, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:34.010600, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:34.010648, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:34.010698, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:34.010749, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:34.010872, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:34.010999, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:34.011425, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.011464, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.011719, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:34.011755, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.011785, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.012325, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.012364, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.012397, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.012428, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.012480, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:34.013030, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013069, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013101, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013132, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013178, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:34.013754, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013793, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013826, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013856, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013920, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.013953, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:34.014373, 3] smbd/process.c:1662(process_smb) Transaction 33 of length 128 (0 toread) [2012/09/03 15:39:34.014415, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:34.014457, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:34.014496, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:34.014525, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:34.014547, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:34.014572, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:34.014618, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:34.014657, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:34.014971, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015011, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015264, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:34.015299, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015329, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015865, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015904, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015937, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.015967, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.016014, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:34.016568, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.016607, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.016639, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.016669, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.016715, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:34.017295, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.017334, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.017367, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.017398, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:34.017460, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:35.941780, 3] smbd/process.c:1662(process_smb) Transaction 34 of length 39 (0 toread) [2012/09/03 15:39:35.941919, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:35.941987, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:35.942042, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:36.766517, 3] smbd/process.c:1662(process_smb) Transaction 35 of length 70 (0 toread) [2012/09/03 15:39:36.766618, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:36.766690, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:36.766738, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:36.766783, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:36.766806, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:36.766882, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:36.766918, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:36.767271, 3] smbd/process.c:1662(process_smb) Transaction 36 of length 115 (0 toread) [2012/09/03 15:39:36.767315, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:36.767387, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:36.767423, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:36.767444, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:36.767465, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:36.767486, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:36.767549, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:36.767595, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:36.767965, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768003, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768258, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:36.768293, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768323, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768865, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768904, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768937, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.768968, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.769018, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:36.769570, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.769609, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.769641, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.769672, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.769719, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:36.770294, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.770334, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.770366, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.770397, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.770481, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.770529, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:36.771236, 3] smbd/process.c:1662(process_smb) Transaction 37 of length 128 (0 toread) [2012/09/03 15:39:36.771297, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:36.771337, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:36.771372, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:36.771402, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:36.771433, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:36.771464, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:36.771537, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:36.771603, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:36.772131, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.772189, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.772598, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:36.772646, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.772693, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.773579, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.773633, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.773682, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.773728, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.773800, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:36.774701, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.774756, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.774805, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.774851, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.774921, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:36.775893, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.775949, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.775998, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.776045, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:36.776142, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:38.948975, 3] smbd/process.c:1662(process_smb) Transaction 38 of length 39 (0 toread) [2012/09/03 15:39:38.949118, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:38.949210, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:38.949285, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:39.072297, 3] smbd/process.c:1662(process_smb) Transaction 39 of length 70 (0 toread) [2012/09/03 15:39:39.072434, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:39.072539, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.072632, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:39.072717, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:39.072771, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:39.072926, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:39.073002, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:39.073799, 3] smbd/process.c:1662(process_smb) Transaction 40 of length 115 (0 toread) [2012/09/03 15:39:39.073894, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.073994, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:39.074054, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.074103, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:39.074153, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.074219, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.074343, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.074444, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.075178, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.075222, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.075479, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.075515, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.075545, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076115, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076155, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076188, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076218, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076270, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.076822, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076868, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076902, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076933, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.076979, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.077555, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.077594, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.077626, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.077656, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.077720, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.077753, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:39.078224, 3] smbd/process.c:1662(process_smb) Transaction 41 of length 128 (0 toread) [2012/09/03 15:39:39.078274, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.078317, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:39.078356, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.078382, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:39.078402, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.078423, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.078470, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.078511, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.078822, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.078861, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079123, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.079159, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079195, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079732, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079771, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079804, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079835, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.079881, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.080434, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.080473, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.080506, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.080536, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.080583, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.081166, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.081205, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.081237, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.081268, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.081330, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.082393, 3] smbd/process.c:1662(process_smb) Transaction 42 of length 147 (0 toread) [2012/09/03 15:39:39.082437, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.082479, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:39:39.082519, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.082546, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=1000,mprcnt=6) [2012/09/03 15:39:39.082568, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.082588, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.082634, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.082674, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.082990, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083031, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083286, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.083321, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083351, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083889, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083928, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083960, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.083991, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.084039, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.084591, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.084630, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.084663, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.084699, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.084746, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.085331, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.085371, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.085403, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.085434, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.085496, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.230273, 3] smbd/process.c:1662(process_smb) Transaction 43 of length 115 (0 toread) [2012/09/03 15:39:39.230413, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.230483, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:39.230539, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.230587, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:39.230638, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.230689, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.230820, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.230930, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.231816, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.231907, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.232532, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.232611, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.232685, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.234036, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.234126, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.234206, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.234281, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.234397, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.235877, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.235972, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.236050, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.236125, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.236236, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.237914, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.238008, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.238106, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.238216, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.238419, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.238526, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:39.239954, 3] smbd/process.c:1662(process_smb) Transaction 44 of length 128 (0 toread) [2012/09/03 15:39:39.240058, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.240146, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:39.240204, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.240252, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:39.240302, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.240353, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.240469, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.240569, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.241390, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.241480, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.242106, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.242186, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.242259, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.243317, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.243357, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.243390, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.243422, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.243470, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.244020, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244059, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244091, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244122, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244168, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.244742, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244782, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244814, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244845, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.244908, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.410361, 3] smbd/process.c:1662(process_smb) Transaction 45 of length 115 (0 toread) [2012/09/03 15:39:39.410461, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.410504, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:39.410529, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.410549, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:39.410570, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.410592, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.410663, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.410721, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.411128, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.411178, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.411436, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.411471, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.411501, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412041, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412080, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412113, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412143, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412194, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.412745, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412784, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412816, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412847, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.412893, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.413466, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.413505, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.413537, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.413568, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.413631, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.413664, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:39.414243, 3] smbd/process.c:1662(process_smb) Transaction 46 of length 128 (0 toread) [2012/09/03 15:39:39.414271, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:39.414294, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:39.414316, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:39.414335, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:39.414355, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:39.414375, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:39.414420, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:39.414458, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.414768, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.414806, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415068, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:39.415104, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415134, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415691, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415731, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415763, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415794, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.415845, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.416427, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.416467, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.416499, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.416530, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.416576, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:39.417146, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.417192, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.417238, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.417283, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.417370, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.899806, 3] smbd/process.c:1662(process_smb) Transaction 47 of length 72 (0 toread) [2012/09/03 15:39:39.899909, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:39:39.899986, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:39:39.900020, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:39:39.900149, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:39:39.900205, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.900581, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.900621, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.900682, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:39:39.900706, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.900740, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:39:39.920197, 3] smbd/process.c:1662(process_smb) Transaction 48 of length 72 (0 toread) [2012/09/03 15:39:39.920288, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:39:39.920338, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:39:39.920372, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:39:39.920493, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:39:39.920549, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:39.920922, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.920961, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.921022, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:39:39.921046, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:39.921079, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:39:41.956234, 3] smbd/process.c:1662(process_smb) Transaction 49 of length 39 (0 toread) [2012/09/03 15:39:41.956378, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:41.956463, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:41.956525, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:39:56.094463, 3] smbd/process.c:1662(process_smb) Transaction 50 of length 70 (0 toread) [2012/09/03 15:39:56.094621, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:39:56.094763, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.094892, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:39:56.095040, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:39:56.095110, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:39:56.095276, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:39:56.095353, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:39:56.096028, 3] smbd/process.c:1662(process_smb) Transaction 51 of length 147 (0 toread) [2012/09/03 15:39:56.096114, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:56.096215, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:39:56.096274, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:56.096323, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:56.096375, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:56.096457, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:39:56.096623, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:56.096727, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.097564, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.097689, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.098461, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:56.098547, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.098622, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.099979, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.100072, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.100151, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.100225, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.100423, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.102497, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.102624, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.102735, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.102842, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.103066, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.103937, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.103977, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.104010, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.104040, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.104105, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.104147, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:56.107421, 3] smbd/process.c:1662(process_smb) Transaction 52 of length 72 (0 toread) [2012/09/03 15:39:56.107494, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:39:56.107567, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:39:56.107603, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:39:56.107717, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:39:56.107769, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.108120, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.108159, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.108220, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:39:56.108244, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.108277, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:39:56.108730, 3] smbd/process.c:1662(process_smb) Transaction 53 of length 115 (0 toread) [2012/09/03 15:39:56.108776, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:56.108834, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:39:56.108873, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:56.108896, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:39:56.108917, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:56.108938, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:39:56.108986, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:56.109027, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.109339, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.109378, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.109633, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:56.109668, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.109698, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.110246, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.110284, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.110317, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.110347, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.110398, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.110957, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111007, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111041, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111072, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111118, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.111720, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111759, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111792, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111823, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111885, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.111917, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:39:56.112290, 3] smbd/process.c:1662(process_smb) Transaction 54 of length 72 (0 toread) [2012/09/03 15:39:56.112332, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:39:56.112388, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:39:56.112432, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:39:56.112512, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:39:56.112552, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.112858, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.112897, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.112956, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:39:56.112980, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.113010, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:39:56.113195, 3] smbd/process.c:1662(process_smb) Transaction 55 of length 128 (0 toread) [2012/09/03 15:39:56.113236, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:56.113291, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:39:56.113331, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:39:56.113356, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:39:56.113376, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:39:56.113396, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:39:56.113441, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:39:56.113479, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:39:56.113787, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.113826, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114079, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:39:56.114113, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114143, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114815, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114858, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114890, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.114921, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.115005, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.115649, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.115697, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.115730, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.115760, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.115808, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:39:56.116396, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.116436, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.116468, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.116499, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:56.116563, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:39:58.996699, 3] smbd/process.c:1662(process_smb) Transaction 56 of length 39 (0 toread) [2012/09/03 15:39:58.996830, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:39:58.996902, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:39:58.996956, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:40:03.156351, 3] smbd/process.c:1662(process_smb) Transaction 57 of length 72 (0 toread) [2012/09/03 15:40:03.156493, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:40:03.156602, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:40:03.156670, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:40:03.156891, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:40:03.157002, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:40:03.157862, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.157954, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.158098, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:40:03.158154, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.158230, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:40:03.159166, 3] smbd/process.c:1662(process_smb) Transaction 58 of length 70 (0 toread) [2012/09/03 15:40:03.159215, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:40:03.159276, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:40:03.159330, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:40:03.159366, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:40:03.159388, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:40:03.159456, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:40:03.159488, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:40:03.160394, 3] smbd/process.c:1662(process_smb) Transaction 59 of length 72 (0 toread) [2012/09/03 15:40:03.160441, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:40:03.160495, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:40:03.160539, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:40:03.160633, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:40:03.160676, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:40:03.160997, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.161037, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.161097, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:40:03.161121, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.161151, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:40:03.161332, 3] smbd/process.c:1662(process_smb) Transaction 60 of length 115 (0 toread) [2012/09/03 15:40:03.161374, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:40:03.161430, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:40:03.161469, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:40:03.161494, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:40:03.161515, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:40:03.161536, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:40:03.161582, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:40:03.161620, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:40:03.161959, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.162013, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.162361, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:40:03.162400, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.162430, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.163021, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.163063, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.163096, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.163127, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.163180, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:40:03.163952, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164011, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164059, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164106, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164166, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:40:03.164772, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164813, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164845, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164876, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164943, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.164976, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:40:03.166433, 3] smbd/process.c:1662(process_smb) Transaction 61 of length 128 (0 toread) [2012/09/03 15:40:03.166490, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:40:03.166534, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:40:03.166573, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:40:03.166595, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:40:03.166616, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:40:03.166636, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:40:03.166688, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:40:03.166734, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:40:03.167075, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.167114, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.167369, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:40:03.167412, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.167452, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.167996, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168035, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168067, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168099, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168147, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:40:03.168703, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168742, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168774, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168804, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.168851, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:40:03.169712, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.169763, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.169796, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.169827, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:03.169895, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:40:06.013417, 3] smbd/process.c:1662(process_smb) Transaction 62 of length 39 (0 toread) [2012/09/03 15:40:06.013569, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:40:06.013652, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:40:06.013717, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:45:06.469036, 3] smbd/process.c:1662(process_smb) Transaction 63 of length 70 (0 toread) [2012/09/03 15:45:06.469134, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:45:06.469211, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:06.469256, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:45:06.469299, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:45:06.469334, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:45:06.469408, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 7231) [2012/09/03 15:45:06.469443, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:45:06.472924, 3] smbd/process.c:1662(process_smb) Transaction 64 of length 120 (0 toread) [2012/09/03 15:45:06.472972, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:06.473029, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/03 15:45:06.473069, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:06.473092, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/03 15:45:06.473114, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/03 15:45:06.473190, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/03 15:45:08.391186, 3] smbd/process.c:1662(process_smb) Transaction 65 of length 113 (0 toread) [2012/09/03 15:45:08.391341, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:08.391494, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2012/09/03 15:45:08.391557, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:08.391606, 3] smbd/lanman.c:5846(api_reply) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=4096,mprcnt=8) [2012/09/03 15:45:08.391656, 3] smbd/lanman.c:5850(api_reply) Doing RNetShareEnum [2012/09/03 15:45:08.391835, 3] smbd/lanman.c:2156(api_RNetShareEnum) RNetShareEnum gave 5 entries of 5 (1 4096 182 4096) [2012/09/03 15:45:10.740263, 3] smbd/process.c:1662(process_smb) Transaction 66 of length 39 (0 toread) [2012/09/03 15:45:10.740386, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:10.740459, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:45:10.740513, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:45:16.960496, 3] smbd/process.c:1662(process_smb) Transaction 67 of length 70 (0 toread) [2012/09/03 15:45:16.960667, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:45:16.960809, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.960940, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:45:16.961059, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:45:16.961136, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:45:16.961366, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:45:16.961468, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:45:16.962131, 3] smbd/process.c:1662(process_smb) Transaction 68 of length 147 (0 toread) [2012/09/03 15:45:16.962228, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.962329, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:45:16.962389, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.962437, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:16.962488, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.962554, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.962681, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.962810, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.963657, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.963749, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.964425, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.964508, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.964582, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.965936, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.966026, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.966105, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.966179, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.966375, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.967810, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.967903, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.967982, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.968057, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.968169, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.969658, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.969750, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.969829, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.969903, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.970087, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.970167, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:16.971364, 3] smbd/process.c:1662(process_smb) Transaction 69 of length 115 (0 toread) [2012/09/03 15:45:16.971462, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.971547, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:45:16.971603, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.971650, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:16.971699, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.971749, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.971857, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.971950, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.972715, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.972804, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.973427, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.973507, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.973591, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.974938, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975048, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975102, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975133, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975180, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.975734, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975774, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975806, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975836, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.975882, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.976468, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.976507, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.976540, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.976570, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.976630, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.976662, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:16.977066, 3] smbd/process.c:1662(process_smb) Transaction 70 of length 128 (0 toread) [2012/09/03 15:45:16.977108, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.977149, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:45:16.977188, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.977218, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:45:16.977239, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.977259, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.977304, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.977343, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.977652, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.977691, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.977944, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.977979, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978009, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978549, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978588, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978620, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978650, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.978697, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.979277, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.979318, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.979350, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.979387, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.979434, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.980020, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.980059, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.980092, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.980123, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.980185, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.980663, 3] smbd/process.c:1662(process_smb) Transaction 71 of length 115 (0 toread) [2012/09/03 15:45:16.980706, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.980747, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:45:16.980787, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.980815, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:16.980837, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.980857, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.980903, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.980941, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.981250, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.981288, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.981560, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.981595, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.981625, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982164, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982203, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982235, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982266, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982313, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.982867, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982907, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982939, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.982990, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983044, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.983629, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983669, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983702, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983732, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983792, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.983824, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:16.984143, 3] smbd/process.c:1662(process_smb) Transaction 72 of length 128 (0 toread) [2012/09/03 15:45:16.984190, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.984232, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:45:16.984271, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.984298, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:45:16.984320, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.984340, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.984385, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.984423, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.984731, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.984770, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985023, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.985057, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985087, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985621, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985660, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985692, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985723, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.985769, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.986317, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.986357, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.986389, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.986420, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.986466, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.987052, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.987092, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.987125, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.987155, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.987216, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.987691, 3] smbd/process.c:1662(process_smb) Transaction 73 of length 115 (0 toread) [2012/09/03 15:45:16.987732, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.987774, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:45:16.987813, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.987842, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:16.987864, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.987884, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.987928, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.987967, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.988279, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.988318, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.988573, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.988607, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.988637, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989175, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989215, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989247, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989278, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989324, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.989870, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989909, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989941, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.989972, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990018, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.990584, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990624, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990656, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990686, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990746, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.990777, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:16.991203, 3] smbd/process.c:1662(process_smb) Transaction 74 of length 128 (0 toread) [2012/09/03 15:45:16.991246, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.991288, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:45:16.991327, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.991356, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:45:16.991377, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.991397, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.991442, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.991480, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.991800, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.991839, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992095, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.992129, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992159, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992690, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992729, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992761, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992797, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.992845, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.993390, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.993429, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.993462, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.993493, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.993539, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.994107, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.994146, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.994178, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.994209, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.994270, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.994727, 3] smbd/process.c:1662(process_smb) Transaction 75 of length 126 (0 toread) [2012/09/03 15:45:16.994769, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:16.994810, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=32 setup=0 [2012/09/03 15:45:16.994850, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:16.994879, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=32,mdrcnt=1024,mprcnt=6) [2012/09/03 15:45:16.994900, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:16.994921, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=52 name=MERLIN checking name: MERLIN [2012/09/03 15:45:16.994992, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:16.995035, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:16.995344, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.995382, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.995636, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:16.995671, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.995700, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996230, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996269, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996301, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996332, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996378, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.996927, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996966, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.996999, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997030, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997076, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:16.997651, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997690, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997722, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997758, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.997993, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:16.998043, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:18.757102, 3] smbd/process.c:1662(process_smb) Transaction 76 of length 39 (0 toread) [2012/09/03 15:45:18.757241, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:18.757324, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:45:18.757388, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 15:45:37.671782, 3] smbd/process.c:1662(process_smb) Transaction 77 of length 70 (0 toread) [2012/09/03 15:45:37.671881, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7231) conn 0x0 [2012/09/03 15:45:37.671954, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:37.672002, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 15:45:37.672045, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 15:45:37.672066, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 15:45:37.672144, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user crlb (uid=1000, gid=1000) (pid 7231) [2012/09/03 15:45:37.672178, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 15:45:37.672543, 3] smbd/process.c:1662(process_smb) Transaction 78 of length 147 (0 toread) [2012/09/03 15:45:37.672589, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:37.672647, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 15:45:37.672687, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:37.672710, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:37.672731, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:37.672752, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 15:45:37.672814, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:37.672942, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:37.673315, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.673354, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.673611, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:37.673647, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.673677, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674224, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674264, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674296, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674327, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674379, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.674937, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.674989, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675033, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675064, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675112, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.675701, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675741, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675773, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675803, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675869, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.675902, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:37.767535, 3] smbd/process.c:1662(process_smb) Transaction 79 of length 115 (0 toread) [2012/09/03 15:45:37.767640, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:37.767683, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=21 setup=0 [2012/09/03 15:45:37.767708, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:37.767729, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=21,mdrcnt=0,mprcnt=6) [2012/09/03 15:45:37.767749, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:37.767772, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=51 name=MERLIN checking name: MERLIN [2012/09/03 15:45:37.767843, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:37.767907, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:37.768293, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.768333, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.768590, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:37.768626, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.768655, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769205, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769244, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769277, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769308, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769360, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.769918, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769958, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.769990, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770021, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770068, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.770681, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770723, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770756, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770786, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770850, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.770883, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 15:45:37.771406, 3] smbd/process.c:1662(process_smb) Transaction 80 of length 128 (0 toread) [2012/09/03 15:45:37.771453, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:37.771495, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=34 setup=0 [2012/09/03 15:45:37.771534, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 15:45:37.771562, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=34,mdrcnt=2400,mprcnt=6) [2012/09/03 15:45:37.771583, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 15:45:37.771603, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=3 name=MERLIN checking name: MERLIN [2012/09/03 15:45:37.771648, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 15:45:37.771687, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:37.771997, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772036, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772291, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 15:45:37.772325, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772355, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772893, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772932, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772964, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.772995, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.773041, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.773596, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.773635, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.773668, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.773698, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.773744, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 15:45:37.774329, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.774368, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.774401, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.774431, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:37.774494, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.196230, 3] smbd/process.c:1662(process_smb) Transaction 81 of length 72 (0 toread) [2012/09/03 15:45:38.196336, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:45:38.196411, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:45:38.196443, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:45:38.196570, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:45:38.196640, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:38.197016, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.197055, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.197125, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:45:38.197149, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.197183, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:45:38.201811, 3] smbd/process.c:1662(process_smb) Transaction 82 of length 72 (0 toread) [2012/09/03 15:45:38.201866, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7231) conn 0xb80ee6e8 [2012/09/03 15:45:38.201910, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 15:45:38.201954, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 15:45:38.202039, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 15:45:38.202083, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 15:45:38.202403, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.202442, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.202502, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 15:45:38.202526, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 15:45:38.202556, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 15:45:39.808934, 3] smbd/process.c:1662(process_smb) Transaction 83 of length 39 (0 toread) [2012/09/03 15:45:39.809071, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7231) conn 0xb80f0608 [2012/09/03 15:45:39.809160, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 15:45:39.809224, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 16:06:35.020322, 3] param/loadparm.c:9572(lp_load_ex) lp_load_ex: refreshing parameters [2012/09/03 16:06:35.020455, 3] param/loadparm.c:5192(init_globals) Initialising global parameters [2012/09/03 16:06:35.020592, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2012/09/03 16:06:35.020652, 3] param/loadparm.c:8310(do_section) Processing section "[global]" [2012/09/03 16:06:35.021028, 2] param/loadparm.c:8327(do_section) Processing section "[printers]" [2012/09/03 16:06:35.021167, 2] param/loadparm.c:8327(do_section) Processing section "[print$]" [2012/09/03 16:06:35.021286, 2] param/loadparm.c:8327(do_section) Processing section "[Media]" [2012/09/03 16:06:35.021396, 2] param/loadparm.c:8327(do_section) Processing section "[Win95]" [2012/09/03 16:06:35.021521, 3] param/loadparm.c:6630(lp_add_ipc) adding IPC service [2012/09/03 16:06:35.021775, 2] lib/interface.c:341(add_interface) added interface eth0 ip=fe80::227:eff:fe12:cb02%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2012/09/03 16:06:35.021866, 2] lib/interface.c:341(add_interface) added interface eth0 ip=192.168.1.11 bcast=192.168.1.255 netmask=255.255.255.0 [2012/09/03 16:11:20.479066, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Win95 [2012/09/03 16:11:20.479207, 3] smbd/connection.c:35(yield_connection) Yielding connection to Win95 [2012/09/03 16:11:20.479351, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Merlin [2012/09/03 16:11:20.479418, 3] smbd/connection.c:35(yield_connection) Yielding connection to Merlin [2012/09/03 16:11:20.479635, 3] smbd/server_exit.c:180(exit_server_common) Server exit (termination signal) [2012/09/03 16:13:00.739109, 3] smbd/process.c:1662(process_smb) Transaction 0 of length 158 (0 toread) [2012/09/03 16:13:00.739160, 3] smbd/process.c:1467(switch_message) switch message SMBnegprot (pid 7563) conn 0x0 [2012/09/03 16:13:00.739454, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2012/09/03 16:13:00.739492, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2012/09/03 16:13:00.739513, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LM1.2X002] [2012/09/03 16:13:00.739533, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LANMAN2.1] [2012/09/03 16:13:00.739553, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2012/09/03 16:13:00.739573, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [NT LM 0.12] [2012/09/03 16:13:00.739660, 3] smbd/negprot.c:401(reply_nt1) not using SPNEGO [2012/09/03 16:13:00.739684, 3] smbd/negprot.c:704(reply_negprot) Selected protocol NT LM 0.12 [2012/09/03 16:13:00.742019, 3] smbd/process.c:1662(process_smb) Transaction 1 of length 164 (0 toread) [2012/09/03 16:13:00.742079, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7563) conn 0x0 [2012/09/03 16:13:00.742136, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 16:13:00.742184, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[MYGROUP] NativeOS=[Windows 4.0] NativeLanMan=[Windows 4.0] PrimaryDomain=[null] [2012/09/03 16:13:00.742216, 2] smbd/sesssetup.c:1279(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2012/09/03 16:13:00.742242, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[MYGROUP]\[CRLB]@[win95] [2012/09/03 16:13:00.742314, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MYGROUP]\[CRLB]@[win95] with the new password interface [2012/09/03 16:13:00.742350, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: [CHIMPANZEE]\[CRLB]@[win95] [2012/09/03 16:13:00.742651, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 16:13:00.743068, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [CRLB] succeeded [2012/09/03 16:13:00.743107, 2] auth/auth.c:309(check_ntlm_password) check_ntlm_password: authentication for user [CRLB] -> [CRLB] -> [crlb] succeeded [2012/09/03 16:13:00.743179, 3] auth/token_util.c:438(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 16:13:00.743232, 3] auth/token_util.c:469(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/03 16:13:00.743574, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: crlb Real name: Colin Leavett-Brown [2012/09/03 16:13:00.743603, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 1000 is UNIX user crlb, and will be vuid 100 [2012/09/03 16:13:00.743664, 3] smbd/password.c:238(register_homes_share) Adding homes service for user 'crlb' using home directory: '/home/crlb' [2012/09/03 16:13:00.743707, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7563) conn 0x0 [2012/09/03 16:13:00.743748, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:00.743788, 3] smbd/service.c:837(make_connection_snum) Connect path is '/var/spool/samba' for service [Merlin] [2012/09/03 16:13:00.743830, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 16:13:00.743857, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 16:13:00.743957, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Merlin initially as user crlb (uid=1000, gid=1000) (pid 7563) [2012/09/03 16:13:00.743990, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=MERLIN [2012/09/03 16:13:00.749471, 3] smbd/process.c:1662(process_smb) Transaction 2 of length 70 (0 toread) [2012/09/03 16:13:00.749540, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7563) conn 0x0 [2012/09/03 16:13:00.749601, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:00.749633, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 16:13:00.749714, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 16:13:00.749788, 3] smbd/service.c:837(make_connection_snum) Connect path is '/home/crlb/Win95' for service [Win95] [2012/09/03 16:13:00.749825, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 16:13:00.749847, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 16:13:00.749910, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/03 16:13:00.749977, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/03 16:13:00.750071, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Win95 initially as user crlb (uid=1000, gid=1000) (pid 7563) [2012/09/03 16:13:00.750104, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=WIN95 [2012/09/03 16:13:01.492620, 3] smbd/process.c:1662(process_smb) Transaction 3 of length 133 (0 toread) [2012/09/03 16:13:01.492680, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 7563) conn 0x0 [2012/09/03 16:13:01.492731, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/03 16:13:01.492771, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[] NativeOS=[MYGROUP] NativeLanMan=[Windows 4.0] PrimaryDomain=[Windows 4.0] [2012/09/03 16:13:01.492794, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[win95] [2012/09/03 16:13:01.492846, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2012/09/03 16:13:01.492880, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2012/09/03 16:13:01.492900, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2012/09/03 16:13:01.492928, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2012/09/03 16:13:01.492956, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: nobody Real name: (null) [2012/09/03 16:13:01.492976, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2012/09/03 16:13:01.493009, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 7563) conn 0x0 [2012/09/03 16:13:01.493048, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:01.493087, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/03 16:13:01.493128, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/03 16:13:01.493150, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/03 16:13:01.493221, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 7563) [2012/09/03 16:13:01.493252, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/03 16:13:01.494359, 3] smbd/process.c:1662(process_smb) Transaction 4 of length 120 (0 toread) [2012/09/03 16:13:01.494401, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7563) conn 0xb8668b30 [2012/09/03 16:13:01.494460, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/03 16:13:01.494501, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 16:13:01.494535, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/03 16:13:01.494558, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/03 16:13:01.494630, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/03 16:13:01.973454, 3] smbd/process.c:1662(process_smb) Transaction 5 of length 147 (0 toread) [2012/09/03 16:13:01.973546, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 7563) conn 0xb8668b30 [2012/09/03 16:13:01.973645, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/03 16:13:01.973674, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/03 16:13:01.973694, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/03 16:13:01.973715, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/03 16:13:01.973739, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/03 16:13:01.973834, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/03 16:13:01.973911, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:01.974340, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.974379, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.974639, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/03 16:13:01.974676, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.974705, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.975294, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.975334, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.975366, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.975397, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.975553, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 16:13:01.976400, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.976454, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.976502, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.976548, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.976613, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/03 16:13:01.977524, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.977577, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.977624, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.977668, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.977776, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:01.977821, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/03 16:13:04.396979, 3] smbd/process.c:1662(process_smb) Transaction 6 of length 39 (0 toread) [2012/09/03 16:13:04.397119, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7563) conn 0xb8668b30 [2012/09/03 16:13:04.397210, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/03 16:13:04.397273, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/03 16:13:07.705904, 3] smbd/process.c:1662(process_smb) Transaction 7 of length 72 (0 toread) [2012/09/03 16:13:07.706002, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7563) conn 0xb8667b60 [2012/09/03 16:13:07.706089, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 16:13:07.706120, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 16:13:07.706257, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 16:13:07.706325, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:07.706818, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.706872, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.706959, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 16:13:07.707006, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.707059, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 16:13:07.709299, 3] smbd/process.c:1662(process_smb) Transaction 8 of length 72 (0 toread) [2012/09/03 16:13:07.709355, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7563) conn 0xb8667b60 [2012/09/03 16:13:07.709401, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 16:13:07.709445, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 16:13:07.709541, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 16:13:07.709587, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:07.709938, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.709978, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.710038, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 16:13:07.710061, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:07.710091, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 16:13:09.090809, 3] smbd/process.c:1662(process_smb) Transaction 9 of length 72 (0 toread) [2012/09/03 16:13:09.090988, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7563) conn 0xb8667b60 [2012/09/03 16:13:09.091087, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 16:13:09.091174, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 16:13:09.091816, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 16:13:09.091940, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:09.092755, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.092845, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.092988, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 16:13:09.093044, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.093119, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 16:13:09.095714, 3] smbd/process.c:1662(process_smb) Transaction 10 of length 72 (0 toread) [2012/09/03 16:13:09.095835, 3] smbd/process.c:1467(switch_message) switch message SMBopenX (pid 7563) conn 0xb8667b60 [2012/09/03 16:13:09.095921, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [] [/var/spool/samba] [2012/09/03 16:13:09.095987, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: reduced to /var/spool/samba/ checking name: Merlin [2012/09/03 16:13:09.096191, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=Merlin [2012/09/03 16:13:09.096295, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/03 16:13:09.097087, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.097178, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.097320, 3] rpc_server/spoolss/srv_spoolss_nt.c:1904(_spoolss_OpenPrinterEx) access DENIED for printer open [2012/09/03 16:13:09.097376, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/03 16:13:09.097448, 3] smbd/error.c:100(error_packet_set) error packet at smbd/error.c(161) cmd=45 (SMBopenX) eclass=1 ecode=5 [2012/09/03 16:23:10.455619, 3] smbd/process.c:1662(process_smb) Transaction 11 of length 39 (0 toread) [2012/09/03 16:23:10.455735, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7563) conn 0xb8667b60 [2012/09/03 16:23:10.455793, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Merlin [2012/09/03 16:23:10.455832, 3] smbd/connection.c:35(yield_connection) Yielding connection to Merlin [2012/09/03 16:23:10.458224, 3] smbd/process.c:1662(process_smb) Transaction 12 of length 39 (0 toread) [2012/09/03 16:23:10.458269, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 7563) conn 0xb8669d70 [2012/09/03 16:23:10.458320, 1] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service Win95 [2012/09/03 16:23:10.458362, 3] smbd/connection.c:35(yield_connection) Yielding connection to Win95 [2012/09/03 16:23:10.459696, 3] smbd/server_exit.c:180(exit_server_common) Server exit (failed to receive smb request) [2012/09/04 20:16:51.482658, 3] smbd/process.c:1662(process_smb) Transaction 0 of length 158 (0 toread) [2012/09/04 20:16:51.482710, 3] smbd/process.c:1467(switch_message) switch message SMBnegprot (pid 20417) conn 0x0 [2012/09/04 20:16:51.483001, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2012/09/04 20:16:51.483043, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2012/09/04 20:16:51.483065, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LM1.2X002] [2012/09/04 20:16:51.483085, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LANMAN2.1] [2012/09/04 20:16:51.483106, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2012/09/04 20:16:51.483127, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [NT LM 0.12] [2012/09/04 20:16:51.483216, 3] smbd/negprot.c:401(reply_nt1) not using SPNEGO [2012/09/04 20:16:51.483242, 3] smbd/negprot.c:704(reply_negprot) Selected protocol NT LM 0.12 [2012/09/04 20:16:51.484873, 3] smbd/process.c:1662(process_smb) Transaction 1 of length 126 (0 toread) [2012/09/04 20:16:51.484921, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 20417) conn 0x0 [2012/09/04 20:16:51.484970, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/04 20:16:51.485016, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[] NativeOS=[] NativeLanMan=[Windows 4.0] PrimaryDomain=[Windows 4.0] [2012/09/04 20:16:51.485045, 2] smbd/sesssetup.c:1279(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2012/09/04 20:16:51.485065, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[win95] [2012/09/04 20:16:51.485099, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2012/09/04 20:16:51.485129, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2012/09/04 20:16:51.485163, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2012/09/04 20:16:51.485194, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2012/09/04 20:16:51.485221, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: nobody Real name: (null) [2012/09/04 20:16:51.485242, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2012/09/04 20:16:51.485275, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 20417) conn 0x0 [2012/09/04 20:16:51.485319, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/04 20:16:51.485360, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/04 20:16:51.485407, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/04 20:16:51.485433, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/04 20:16:51.485528, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 20417) [2012/09/04 20:16:51.485559, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/04 20:16:51.486994, 3] smbd/process.c:1662(process_smb) Transaction 2 of length 147 (0 toread) [2012/09/04 20:16:51.487038, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 20417) conn 0xb866a228 [2012/09/04 20:16:51.487097, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=53 setup=0 [2012/09/04 20:16:51.487134, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/04 20:16:51.487156, 3] smbd/lanman.c:5846(api_reply) Got API command 70 of form (tdscnt=0,tpscnt=53,mdrcnt=0,mprcnt=6) [2012/09/04 20:16:51.487178, 3] smbd/lanman.c:5850(api_reply) Doing DosPrintQGetInfo [2012/09/04 20:16:51.487200, 3] smbd/lanman.c:804(api_DosPrintQGetInfo) api_DosPrintQGetInfo uLevel=2 name=MERLIN checking name: MERLIN [2012/09/04 20:16:51.487287, 3] rpc_server/spoolss/srv_spoolss_nt.c:521(set_printer_hnd_printertype) Setting printer type=MERLIN [2012/09/04 20:16:51.487360, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/04 20:16:51.487788, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.487829, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488085, 2] rpc_client/cli_winreg_spoolss.c:898(winreg_create_printer) winreg_create_printer: Skipping, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Merlin already exists [2012/09/04 20:16:51.488122, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488152, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488721, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488761, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488793, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488823, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.488956, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/04 20:16:51.489847, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.489905, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.489951, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.489994, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.490061, 1] printing/printer_list.c:94(printer_list_get_printer) Failed to fetch record! [2012/09/04 20:16:51.490960, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.491011, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.491044, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.491075, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.491151, 3] rpc_server/rpc_handles.c:281(close_policy_hnd) Closed policy [2012/09/04 20:16:51.491184, 3] smbd/lanman.c:5715(api_TooSmall) Supplied buffer too small in API command [2012/09/04 20:16:53.330863, 3] smbd/process.c:1662(process_smb) Transaction 3 of length 39 (0 toread) [2012/09/04 20:16:53.331013, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 20417) conn 0xb866a228 [2012/09/04 20:16:53.331113, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/04 20:16:53.331208, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/04 20:16:53.333700, 3] smbd/server_exit.c:180(exit_server_common) Server exit (failed to receive smb request) [2012/09/05 07:48:23.567671, 3] smbd/process.c:1662(process_smb) Transaction 0 of length 158 (0 toread) [2012/09/05 07:48:23.584536, 3] smbd/process.c:1467(switch_message) switch message SMBnegprot (pid 4393) conn 0x0 [2012/09/05 07:48:23.584853, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2012/09/05 07:48:23.584896, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2012/09/05 07:48:23.584919, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LM1.2X002] [2012/09/05 07:48:23.584939, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [DOS LANMAN2.1] [2012/09/05 07:48:23.584960, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2012/09/05 07:48:23.584982, 3] smbd/negprot.c:598(reply_negprot) Requested protocol [NT LM 0.12] [2012/09/05 07:48:23.585083, 3] smbd/negprot.c:401(reply_nt1) not using SPNEGO [2012/09/05 07:48:23.585109, 3] smbd/negprot.c:704(reply_negprot) Selected protocol NT LM 0.12 [2012/09/05 07:48:23.588207, 3] smbd/process.c:1662(process_smb) Transaction 1 of length 164 (0 toread) [2012/09/05 07:48:23.588256, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 4393) conn 0x0 [2012/09/05 07:48:23.588305, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/05 07:48:23.588352, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[MYGROUP] NativeOS=[Windows 4.0] NativeLanMan=[Windows 4.0] PrimaryDomain=[null] [2012/09/05 07:48:23.588379, 2] smbd/sesssetup.c:1279(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2012/09/05 07:48:23.588400, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[MYGROUP]\[CRLB]@[win95] [2012/09/05 07:48:23.588469, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MYGROUP]\[CRLB]@[win95] with the new password interface [2012/09/05 07:48:23.588497, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: [CHIMPANZEE]\[CRLB]@[win95] [2012/09/05 07:48:23.623281, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/05 07:48:23.623615, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [CRLB] succeeded [2012/09/05 07:48:23.623652, 2] auth/auth.c:309(check_ntlm_password) check_ntlm_password: authentication for user [CRLB] -> [CRLB] -> [crlb] succeeded [2012/09/05 07:48:23.641441, 3] auth/token_util.c:438(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/05 07:48:23.641533, 3] auth/token_util.c:469(finalize_local_nt_token) Failed to fetch domain sid for MYGROUP [2012/09/05 07:48:23.641896, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: crlb Real name: Colin Leavett-Brown [2012/09/05 07:48:23.641935, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 1000 is UNIX user crlb, and will be vuid 100 [2012/09/05 07:48:23.641997, 3] smbd/password.c:238(register_homes_share) Adding homes service for user 'crlb' using home directory: '/home/crlb' [2012/09/05 07:48:23.642044, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 4393) conn 0x0 [2012/09/05 07:48:23.642086, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/05 07:48:23.642128, 3] smbd/service.c:837(make_connection_snum) Connect path is '/var/spool/samba' for service [Merlin] [2012/09/05 07:48:23.642172, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/05 07:48:23.642199, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/05 07:48:23.642306, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Merlin initially as user crlb (uid=1000, gid=1000) (pid 4393) [2012/09/05 07:48:23.642341, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=MERLIN [2012/09/05 07:48:23.657827, 3] smbd/process.c:1662(process_smb) Transaction 2 of length 70 (0 toread) [2012/09/05 07:48:23.657905, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 4393) conn 0x0 [2012/09/05 07:48:23.657970, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/05 07:48:23.658010, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/05 07:48:23.658100, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/05 07:48:23.658182, 3] smbd/service.c:837(make_connection_snum) Connect path is '/home/crlb/Win95' for service [Win95] [2012/09/05 07:48:23.658221, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/05 07:48:23.658242, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/05 07:48:23.658311, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp) string_to_sid: SID crlb is not in a valid format [2012/09/05 07:48:23.658378, 3] passdb/lookup_sid.c:1737(get_primary_group_sid) Forcing Primary Group to 'Domain Users' for crlb [2012/09/05 07:48:23.658483, 1] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service Win95 initially as user crlb (uid=1000, gid=1000) (pid 4393) [2012/09/05 07:48:23.658517, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=WIN95 [2012/09/05 07:48:24.824371, 3] smbd/process.c:1662(process_smb) Transaction 3 of length 133 (0 toread) [2012/09/05 07:48:24.824452, 3] smbd/process.c:1467(switch_message) switch message SMBsesssetupX (pid 4393) conn 0x0 [2012/09/05 07:48:24.824502, 3] smbd/sesssetup.c:1333(reply_sesssetup_and_X) wct=13 flg2=0x0 [2012/09/05 07:48:24.824540, 3] smbd/sesssetup.c:1536(reply_sesssetup_and_X) Domain=[] NativeOS=[MYGROUP] NativeLanMan=[Windows 4.0] PrimaryDomain=[Windows 4.0] [2012/09/05 07:48:24.824562, 3] smbd/sesssetup.c:1552(reply_sesssetup_and_X) sesssetupX:name=[]\[]@[win95] [2012/09/05 07:48:24.824613, 3] smbd/sesssetup.c:151(check_guest_password) Got anonymous request [2012/09/05 07:48:24.824647, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2012/09/05 07:48:24.824668, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: []\[]@[] [2012/09/05 07:48:24.824696, 3] auth/auth.c:268(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2012/09/05 07:48:24.824724, 3] smbd/password.c:297(register_existing_vuid) register_existing_vuid: User name: nobody Real name: (null) [2012/09/05 07:48:24.824745, 3] smbd/password.c:307(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101 [2012/09/05 07:48:24.824783, 3] smbd/process.c:1467(switch_message) switch message SMBtconX (pid 4393) conn 0x0 [2012/09/05 07:48:24.824823, 3] lib/access.c:338(allow_access) Allowed connection from 192.168.1.12 (192.168.1.12) [2012/09/05 07:48:24.824862, 3] smbd/service.c:837(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2012/09/05 07:48:24.824907, 3] smbd/vfs.c:102(vfs_init_default) Initialising default vfs hooks [2012/09/05 07:48:24.824935, 3] smbd/vfs.c:128(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2012/09/05 07:48:24.825009, 3] smbd/service.c:1081(make_connection_snum) win95 (192.168.1.12) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 4393) [2012/09/05 07:48:24.825040, 3] smbd/reply.c:871(reply_tcon_and_X) tconX service=IPC$ [2012/09/05 07:48:24.826829, 3] smbd/process.c:1662(process_smb) Transaction 4 of length 120 (0 toread) [2012/09/05 07:48:24.826878, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 4393) conn 0xb867b1a8 [2012/09/05 07:48:24.826939, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2012/09/05 07:48:24.826993, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/05 07:48:24.827016, 3] smbd/lanman.c:5846(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=26,mdrcnt=4096,mprcnt=8) [2012/09/05 07:48:24.827038, 3] smbd/lanman.c:5850(api_reply) Doing NetServerEnum2 [2012/09/05 07:48:24.827119, 3] smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = MYGROUP uLevel=1 counted=1 total=1 [2012/09/05 07:48:26.864132, 3] smbd/process.c:1662(process_smb) Transaction 5 of length 113 (0 toread) [2012/09/05 07:48:26.864236, 3] smbd/process.c:1467(switch_message) switch message SMBtrans (pid 4393) conn 0xb867b1a8 [2012/09/05 07:48:26.864333, 3] smbd/ipc.c:560(handle_trans) trans <\PIPE\LANMAN> data=0 params=19 setup=0 [2012/09/05 07:48:26.864361, 3] smbd/ipc.c:511(named_pipe) named pipe command on name [2012/09/05 07:48:26.864382, 3] smbd/lanman.c:5846(api_reply) Got API command 0 of form (tdscnt=0,tpscnt=19,mdrcnt=4096,mprcnt=8) [2012/09/05 07:48:26.864403, 3] smbd/lanman.c:5850(api_reply) Doing RNetShareEnum [2012/09/05 07:48:26.864502, 3] smbd/lanman.c:2156(api_RNetShareEnum) RNetShareEnum gave 5 entries of 5 (1 4096 182 4096) [2012/09/05 07:48:28.963660, 3] smbd/process.c:1662(process_smb) Transaction 6 of length 39 (0 toread) [2012/09/05 07:48:28.963805, 3] smbd/process.c:1467(switch_message) switch message SMBtdis (pid 4393) conn 0xb867b1a8 [2012/09/05 07:48:28.963896, 3] smbd/service.c:1345(close_cnum) win95 (192.168.1.12) closed connection to service IPC$ [2012/09/05 07:48:28.963961, 3] smbd/connection.c:35(yield_connection) Yielding connection to IPC$ [2012/09/05 07:48:36.120887, 3] smbd/process.c:1662(process_smb) Transaction 7 of length 66 (0 toread) [2012/09/05 07:48:36.121047, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.145542, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [DESKTOP.INI] [/home/crlb/Win95] [2012/09/05 07:48:36.145604, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: DESKTOP.INI reduced to /home/crlb/Win95/DESKTOP.INI [2012/09/05 07:48:36.145643, 3] smbd/reply.c:1136(reply_getatr) reply_getatr: stat of DESKTOP.INI failed (No such file or directory) [2012/09/05 07:48:36.145695, 3] smbd/error.c:100(error_packet_set) error packet at smbd/reply.c(1137) cmd=8 (SMBgetatr) eclass=1 ecode=2 [2012/09/05 07:48:36.149010, 3] smbd/process.c:1662(process_smb) Transaction 8 of length 42 (0 toread) [2012/09/05 07:48:36.149129, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.149203, 3] smbd/reply.c:1178(reply_getatr) reply_getatr: name= mode=18 size=0 [2012/09/05 07:48:36.151167, 3] smbd/process.c:1662(process_smb) Transaction 9 of length 42 (0 toread) [2012/09/05 07:48:36.151240, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.151294, 3] smbd/reply.c:1178(reply_getatr) reply_getatr: name= mode=18 size=0 [2012/09/05 07:48:36.168614, 3] smbd/process.c:1662(process_smb) Transaction 10 of length 66 (0 toread) [2012/09/05 07:48:36.168716, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.168904, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [DESKTOP.INI] [/home/crlb/Win95] [2012/09/05 07:48:36.168955, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: DESKTOP.INI reduced to /home/crlb/Win95/DESKTOP.INI [2012/09/05 07:48:36.168989, 3] smbd/reply.c:1136(reply_getatr) reply_getatr: stat of DESKTOP.INI failed (No such file or directory) [2012/09/05 07:48:36.169040, 3] smbd/error.c:100(error_packet_set) error packet at smbd/reply.c(1137) cmd=8 (SMBgetatr) eclass=1 ecode=2 [2012/09/05 07:48:36.176523, 3] smbd/process.c:1662(process_smb) Transaction 11 of length 88 (0 toread) [2012/09/05 07:48:36.176630, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.176680, 3] smbd/trans2.c:2292(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=0, close_if_end = 0 requires_resume_key = 0 level = 0x104, max_data_bytes = 2432 [2012/09/05 07:48:36.176723, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [*] [/home/crlb/Win95] [2012/09/05 07:48:36.176771, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: * reduced to /home/crlb/Win95/* [2012/09/05 07:48:36.177507, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [.] [/home/crlb/Win95] [2012/09/05 07:48:36.177541, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: . reduced to /home/crlb/Win95 [2012/09/05 07:48:36.177575, 3] smbd/dir.c:578(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2012/09/05 07:48:36.184659, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./. fname=. (.) [2012/09/05 07:48:36.184743, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..) [2012/09/05 07:48:36.184895, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120219.182049.zip fname=ECN.20120219.182049.zip (ECN.20120219.182049.zip) [2012/09/05 07:48:36.184961, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120205.000639.zip fname=ECN.20120205.000639.zip (ECN.20120205.000639.zip) [2012/09/05 07:48:36.186266, 3] smbd/process.c:1662(process_smb) Transaction 12 of length 130 (0 toread) [2012/09/05 07:48:36.186320, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.186369, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120205.000639.zip continue=0 level = 260 [2012/09/05 07:48:36.186920, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.186955, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,47306936) [2012/09/05 07:48:36.187039, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110609.175710.zip fname=ECN.20110609.175710.zip (ECN.20110609.175710.zip) [2012/09/05 07:48:36.187102, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.154523.zip fname=ECN.20110806.154523.zip (ECN.20110806.154523.zip) [2012/09/05 07:48:36.187162, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111126.181437.zip fname=ECN.20111126.181437.zip (ECN.20111126.181437.zip) [2012/09/05 07:48:36.187231, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.214321.zip fname=ECN.20120807.214321.zip (ECN.20120807.214321.zip) [2012/09/05 07:48:36.187275, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.187779, 3] smbd/process.c:1662(process_smb) Transaction 13 of length 130 (0 toread) [2012/09/05 07:48:36.187827, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.187872, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120807.214321.zip continue=0 level = 260 [2012/09/05 07:48:36.187914, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.187940, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,139568277) [2012/09/05 07:48:36.187976, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120216.181658.zip fname=ECN.20120216.181658.zip (ECN.20120216.181658.zip) [2012/09/05 07:48:36.188016, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120206.204440.zip fname=ECN.20120206.204440.zip (ECN.20120206.204440.zip) [2012/09/05 07:48:36.188055, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120828.205826.zip fname=ECN.20120828.205826.zip (ECN.20120828.205826.zip) [2012/09/05 07:48:36.188094, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120731.204327.zip fname=ECN.20120731.204327.zip (ECN.20120731.204327.zip) [2012/09/05 07:48:36.188122, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.188540, 3] smbd/process.c:1662(process_smb) Transaction 14 of length 130 (0 toread) [2012/09/05 07:48:36.188581, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.188625, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120731.204327.zip continue=0 level = 260 [2012/09/05 07:48:36.188666, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.188694, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,209553056) [2012/09/05 07:48:36.188730, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120827.212832.zip fname=ECN.20120827.212832.zip (ECN.20120827.212832.zip) [2012/09/05 07:48:36.188782, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.215906.zip fname=ECN.20110806.215906.zip (ECN.20110806.215906.zip) [2012/09/05 07:48:36.188834, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.210812.zip fname=ECN.20120807.210812.zip (ECN.20120807.210812.zip) [2012/09/05 07:48:36.188887, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./TEMPJESH.XLS fname=TEMPJESH.XLS (TEMPJESH.XLS) [2012/09/05 07:48:36.188923, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.189366, 3] smbd/process.c:1662(process_smb) Transaction 15 of length 108 (0 toread) [2012/09/05 07:48:36.189425, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.189459, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = TEMPJESH.XLS continue=0 level = 260 [2012/09/05 07:48:36.189492, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.189513, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,289274523) [2012/09/05 07:48:36.189556, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120410.220047.zip fname=ECN.20120410.220047.zip (ECN.20120410.220047.zip) [2012/09/05 07:48:36.189598, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.164143.zip fname=ECN.20120609.164143.zip (ECN.20120609.164143.zip) [2012/09/05 07:48:36.189637, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120506.082444.zip fname=ECN.20120506.082444.zip (ECN.20120506.082444.zip) [2012/09/05 07:48:36.189675, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120620.171300.zip fname=ECN.20120620.171300.zip (ECN.20120620.171300.zip) [2012/09/05 07:48:36.189702, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.190138, 3] smbd/process.c:1662(process_smb) Transaction 16 of length 130 (0 toread) [2012/09/05 07:48:36.190185, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.190229, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120620.171300.zip continue=0 level = 260 [2012/09/05 07:48:36.190271, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.190298, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,317994871) [2012/09/05 07:48:36.190334, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120225.212153.zip fname=ECN.20120225.212153.zip (ECN.20120225.212153.zip) [2012/09/05 07:48:36.190373, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.182335.zip fname=ECN.20110806.182335.zip (ECN.20110806.182335.zip) [2012/09/05 07:48:36.190412, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120218.182344.zip fname=ECN.20120218.182344.zip (ECN.20120218.182344.zip) [2012/09/05 07:48:36.190450, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120620.173035.zip fname=ECN.20120620.173035.zip (ECN.20120620.173035.zip) [2012/09/05 07:48:36.190478, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.190906, 3] smbd/process.c:1662(process_smb) Transaction 17 of length 130 (0 toread) [2012/09/05 07:48:36.190949, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.191004, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120620.173035.zip continue=0 level = 260 [2012/09/05 07:48:36.191045, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.191070, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,392291823) [2012/09/05 07:48:36.191108, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110705.221806.zip fname=ECN.20110705.221806.zip (ECN.20110705.221806.zip) [2012/09/05 07:48:36.191154, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110905.162319.zip fname=ECN.20110905.162319.zip (ECN.20110905.162319.zip) [2012/09/05 07:48:36.191193, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110609.162539.zip fname=ECN.20110609.162539.zip (ECN.20110609.162539.zip) [2012/09/05 07:48:36.191236, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120506.072109.zip fname=ECN.20120506.072109.zip (ECN.20120506.072109.zip) [2012/09/05 07:48:36.191264, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.191730, 3] smbd/process.c:1662(process_smb) Transaction 18 of length 130 (0 toread) [2012/09/05 07:48:36.191772, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.191816, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120506.072109.zip continue=0 level = 260 [2012/09/05 07:48:36.191857, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.191895, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,504930499) [2012/09/05 07:48:36.191945, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120211.161700.zip fname=ECN.20120211.161700.zip (ECN.20120211.161700.zip) [2012/09/05 07:48:36.191999, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120331.165057.zip fname=ECN.20120331.165057.zip (ECN.20120331.165057.zip) [2012/09/05 07:48:36.192043, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120103.213823.zip fname=ECN.20120103.213823.zip (ECN.20120103.213823.zip) [2012/09/05 07:48:36.192081, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./_WEDDING.CSV fname=_WEDDING.CSV (_WEDDING.CSV) [2012/09/05 07:48:36.192107, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.192527, 3] smbd/process.c:1662(process_smb) Transaction 19 of length 108 (0 toread) [2012/09/05 07:48:36.192568, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.192612, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = _WEDDING.CSV continue=0 level = 260 [2012/09/05 07:48:36.192652, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.192682, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,521281251) [2012/09/05 07:48:36.192718, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110906.204544.zip fname=ECN.20110906.204544.zip (ECN.20110906.204544.zip) [2012/09/05 07:48:36.192755, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120206.202506.zip fname=ECN.20120206.202506.zip (ECN.20120206.202506.zip) [2012/09/05 07:48:36.192793, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120506.072735.zip fname=ECN.20120506.072735.zip (ECN.20120506.072735.zip) [2012/09/05 07:48:36.192830, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120225.121252.zip fname=ECN.20120225.121252.zip (ECN.20120225.121252.zip) [2012/09/05 07:48:36.192857, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.193272, 3] smbd/process.c:1662(process_smb) Transaction 20 of length 130 (0 toread) [2012/09/05 07:48:36.193314, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.193357, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120225.121252.zip continue=0 level = 260 [2012/09/05 07:48:36.193403, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.193430, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,595136989) [2012/09/05 07:48:36.193465, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120109.215712.zip fname=ECN.20120109.215712.zip (ECN.20120109.215712.zip) [2012/09/05 07:48:36.193505, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111008.162337.zip fname=ECN.20111008.162337.zip (ECN.20111008.162337.zip) [2012/09/05 07:48:36.193543, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120107.152602.zip fname=ECN.20120107.152602.zip (ECN.20120107.152602.zip) [2012/09/05 07:48:36.193580, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.220447.zip fname=ECN.20120807.220447.zip (ECN.20120807.220447.zip) [2012/09/05 07:48:36.193607, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.193993, 3] smbd/process.c:1662(process_smb) Transaction 21 of length 130 (0 toread) [2012/09/05 07:48:36.194037, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.194080, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120807.220447.zip continue=0 level = 260 [2012/09/05 07:48:36.194119, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.194142, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,655389519) [2012/09/05 07:48:36.194175, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120313.195621.zip fname=ECN.20120313.195621.zip (ECN.20120313.195621.zip) [2012/09/05 07:48:36.194213, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120219.210948.zip fname=ECN.20120219.210948.zip (ECN.20120219.210948.zip) [2012/09/05 07:48:36.194251, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120715.092734.zip fname=ECN.20120715.092734.zip (ECN.20120715.092734.zip) [2012/09/05 07:48:36.194288, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120212.232850.zip fname=ECN.20120212.232850.zip (ECN.20120212.232850.zip) [2012/09/05 07:48:36.194316, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.194723, 3] smbd/process.c:1662(process_smb) Transaction 22 of length 130 (0 toread) [2012/09/05 07:48:36.194765, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.194808, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120212.232850.zip continue=0 level = 260 [2012/09/05 07:48:36.194848, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.194877, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,743462155) [2012/09/05 07:48:36.194912, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ChartOfAccounts.xls fname=ChartOfAccounts.xls (ChartOfAccounts.xls) [2012/09/05 07:48:36.194950, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110609.171046.zip fname=ECN.20110609.171046.zip (ECN.20110609.171046.zip) [2012/09/05 07:48:36.195015, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120325.071704.zip fname=ECN.20120325.071704.zip (ECN.20120325.071704.zip) [2012/09/05 07:48:36.195055, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120218.105208.zip fname=ECN.20120218.105208.zip (ECN.20120218.105208.zip) [2012/09/05 07:48:36.195083, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.195541, 3] smbd/process.c:1662(process_smb) Transaction 23 of length 130 (0 toread) [2012/09/05 07:48:36.195587, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.195631, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120218.105208.zip continue=0 level = 260 [2012/09/05 07:48:36.195672, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.195699, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,847154056) [2012/09/05 07:48:36.195734, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.183202.zip fname=ECN.20120609.183202.zip (ECN.20120609.183202.zip) [2012/09/05 07:48:36.195774, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120506.083845.zip fname=ECN.20120506.083845.zip (ECN.20120506.083845.zip) [2012/09/05 07:48:36.195811, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120828.212020.zip fname=ECN.20120828.212020.zip (ECN.20120828.212020.zip) [2012/09/05 07:48:36.195849, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110809.231502.zip fname=ECN.20110809.231502.zip (ECN.20110809.231502.zip) [2012/09/05 07:48:36.195876, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.196291, 3] smbd/process.c:1662(process_smb) Transaction 24 of length 130 (0 toread) [2012/09/05 07:48:36.196333, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.196376, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20110809.231502.zip continue=0 level = 260 [2012/09/05 07:48:36.196416, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.196445, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,879920189) [2012/09/05 07:48:36.196481, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120115.162741.zip fname=ECN.20120115.162741.zip (ECN.20120115.162741.zip) [2012/09/05 07:48:36.196518, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111008.123916.zip fname=ECN.20111008.123916.zip (ECN.20111008.123916.zip) [2012/09/05 07:48:36.196556, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN fname=ECN (ECN) [2012/09/05 07:48:36.196590, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.215707.zip fname=ECN.20120807.215707.zip (ECN.20120807.215707.zip) [2012/09/05 07:48:36.196617, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.197162, 3] smbd/process.c:1662(process_smb) Transaction 25 of length 130 (0 toread) [2012/09/05 07:48:36.197203, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.197246, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120807.215707.zip continue=0 level = 260 [2012/09/05 07:48:36.197293, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.197320, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,963981351) [2012/09/05 07:48:36.197355, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120215.064724.zip fname=ECN.20120215.064724.zip (ECN.20120215.064724.zip) [2012/09/05 07:48:36.197393, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110922.222034.zip fname=ECN.20110922.222034.zip (ECN.20110922.222034.zip) [2012/09/05 07:48:36.197430, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120204.180154.zip fname=ECN.20120204.180154.zip (ECN.20120204.180154.zip) [2012/09/05 07:48:36.197468, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ADDRESS.CSV fname=ADDRESS.CSV (ADDRESS.CSV) [2012/09/05 07:48:36.197493, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.197907, 3] smbd/process.c:1662(process_smb) Transaction 26 of length 106 (0 toread) [2012/09/05 07:48:36.197949, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.197992, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ADDRESS.CSV continue=0 level = 260 [2012/09/05 07:48:36.198032, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.198071, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1026396883) [2012/09/05 07:48:36.198110, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120607.201912.zip fname=ECN.20120607.201912.zip (ECN.20120607.201912.zip) [2012/09/05 07:48:36.198149, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120313.193014.zip fname=ECN.20120313.193014.zip (ECN.20120313.193014.zip) [2012/09/05 07:48:36.198187, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120529.211427.zip fname=ECN.20120529.211427.zip (ECN.20120529.211427.zip) [2012/09/05 07:48:36.198224, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120219.084056.zip fname=ECN.20120219.084056.zip (ECN.20120219.084056.zip) [2012/09/05 07:48:36.198251, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.198668, 3] smbd/process.c:1662(process_smb) Transaction 27 of length 130 (0 toread) [2012/09/05 07:48:36.198710, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.198753, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120219.084056.zip continue=0 level = 260 [2012/09/05 07:48:36.198794, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.198823, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1102863816) [2012/09/05 07:48:36.198858, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120103.215545.zip fname=ECN.20120103.215545.zip (ECN.20120103.215545.zip) [2012/09/05 07:48:36.198896, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.161812.zip fname=ECN.20110806.161812.zip (ECN.20110806.161812.zip) [2012/09/05 07:48:36.198939, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.220928.zip fname=ECN.20120807.220928.zip (ECN.20120807.220928.zip) [2012/09/05 07:48:36.198983, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120624.083203.zip fname=ECN.20120624.083203.zip (ECN.20120624.083203.zip) [2012/09/05 07:48:36.199013, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.199604, 3] smbd/process.c:1662(process_smb) Transaction 28 of length 130 (0 toread) [2012/09/05 07:48:36.199645, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.199689, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120624.083203.zip continue=0 level = 260 [2012/09/05 07:48:36.199729, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.199759, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1251347821) [2012/09/05 07:48:36.199794, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120827.212401.zip fname=ECN.20120827.212401.zip (ECN.20120827.212401.zip) [2012/09/05 07:48:36.199831, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120430.205121.zip fname=ECN.20120430.205121.zip (ECN.20120430.205121.zip) [2012/09/05 07:48:36.199869, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120607.203231.zip fname=ECN.20120607.203231.zip (ECN.20120607.203231.zip) [2012/09/05 07:48:36.199906, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111213.171613.zip fname=ECN.20111213.171613.zip (ECN.20111213.171613.zip) [2012/09/05 07:48:36.199933, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.200364, 3] smbd/process.c:1662(process_smb) Transaction 29 of length 130 (0 toread) [2012/09/05 07:48:36.200405, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.200449, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20111213.171613.zip continue=0 level = 260 [2012/09/05 07:48:36.200489, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.200518, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1294533159) [2012/09/05 07:48:36.200555, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110705.204225.zip fname=ECN.20110705.204225.zip (ECN.20110705.204225.zip) [2012/09/05 07:48:36.200608, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110609.174716.zip fname=ECN.20110609.174716.zip (ECN.20110609.174716.zip) [2012/09/05 07:48:36.200648, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111113.092410.zip fname=ECN.20111113.092410.zip (ECN.20111113.092410.zip) [2012/09/05 07:48:36.200685, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./NAME.CSV fname=NAME.CSV (NAME.CSV) [2012/09/05 07:48:36.200711, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.207384, 3] smbd/process.c:1662(process_smb) Transaction 30 of length 100 (0 toread) [2012/09/05 07:48:36.207432, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.207483, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = NAME.CSV continue=0 level = 260 [2012/09/05 07:48:36.207524, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.207547, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1381132941) [2012/09/05 07:48:36.207582, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.200721.zip fname=ECN.20110806.200721.zip (ECN.20110806.200721.zip) [2012/09/05 07:48:36.207621, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120428.171930.zip fname=ECN.20120428.171930.zip (ECN.20120428.171930.zip) [2012/09/05 07:48:36.207660, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120410.212815.zip fname=ECN.20120410.212815.zip (ECN.20120410.212815.zip) [2012/09/05 07:48:36.207697, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120205.192819.zip fname=ECN.20120205.192819.zip (ECN.20120205.192819.zip) [2012/09/05 07:48:36.207725, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.208179, 3] smbd/process.c:1662(process_smb) Transaction 31 of length 130 (0 toread) [2012/09/05 07:48:36.208225, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.208270, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120205.192819.zip continue=0 level = 260 [2012/09/05 07:48:36.208311, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.208337, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1499597097) [2012/09/05 07:48:36.208372, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111207.203100.zip fname=ECN.20111207.203100.zip (ECN.20111207.203100.zip) [2012/09/05 07:48:36.208411, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.114713.zip fname=ECN.20120609.114713.zip (ECN.20120609.114713.zip) [2012/09/05 07:48:36.208449, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./WEDDINGS.CSV fname=WEDDINGS.CSV (WEDDINGS.CSV) [2012/09/05 07:48:36.208484, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111008.112226.zip fname=ECN.20111008.112226.zip (ECN.20111008.112226.zip) [2012/09/05 07:48:36.208512, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.208925, 3] smbd/process.c:1662(process_smb) Transaction 32 of length 130 (0 toread) [2012/09/05 07:48:36.208967, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.209010, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20111008.112226.zip continue=0 level = 260 [2012/09/05 07:48:36.209051, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.209080, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1555257254) [2012/09/05 07:48:36.209116, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111008.171109.zip fname=ECN.20111008.171109.zip (ECN.20111008.171109.zip) [2012/09/05 07:48:36.209154, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.172944.zip fname=ECN.20120609.172944.zip (ECN.20120609.172944.zip) [2012/09/05 07:48:36.209197, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120627.214852.zip fname=ECN.20120627.214852.zip (ECN.20120627.214852.zip) [2012/09/05 07:48:36.209235, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120807.212023.zip fname=ECN.20120807.212023.zip (ECN.20120807.212023.zip) [2012/09/05 07:48:36.209264, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.211013, 3] smbd/process.c:1662(process_smb) Transaction 33 of length 130 (0 toread) [2012/09/05 07:48:36.211058, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.211102, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120807.212023.zip continue=0 level = 260 [2012/09/05 07:48:36.211142, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.211167, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1620992439) [2012/09/05 07:48:36.211201, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120122.093050.zip fname=ECN.20120122.093050.zip (ECN.20120122.093050.zip) [2012/09/05 07:48:36.211240, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111015.121553.zip fname=ECN.20111015.121553.zip (ECN.20111015.121553.zip) [2012/09/05 07:48:36.211290, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120430.202612.zip fname=ECN.20120430.202612.zip (ECN.20120430.202612.zip) [2012/09/05 07:48:36.211330, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./CVCN fname=CVCN (CVCN) [2012/09/05 07:48:36.211356, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.211774, 3] smbd/process.c:1662(process_smb) Transaction 34 of length 92 (0 toread) [2012/09/05 07:48:36.211816, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.211859, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN continue=0 level = 260 [2012/09/05 07:48:36.211900, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.211929, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1753313256) [2012/09/05 07:48:36.211965, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120428.182509.zip fname=ECN.20120428.182509.zip (ECN.20120428.182509.zip) [2012/09/05 07:48:36.212003, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120227.194045.zip fname=ECN.20120227.194045.zip (ECN.20120227.194045.zip) [2012/09/05 07:48:36.212041, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20111126.163534.zip fname=ECN.20111126.163534.zip (ECN.20111126.163534.zip) [2012/09/05 07:48:36.212078, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120219.184819.zip fname=ECN.20120219.184819.zip (ECN.20120219.184819.zip) [2012/09/05 07:48:36.212106, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.212526, 3] smbd/process.c:1662(process_smb) Transaction 35 of length 130 (0 toread) [2012/09/05 07:48:36.212567, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.212620, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120219.184819.zip continue=0 level = 260 [2012/09/05 07:48:36.212664, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.212689, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1871421970) [2012/09/05 07:48:36.212723, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.215558.zip fname=ECN.20110806.215558.zip (ECN.20110806.215558.zip) [2012/09/05 07:48:36.212761, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./TEMPJESH.xls fname=TEMPJESH.xls (TEMPJESH.xls) [2012/09/05 07:48:36.212796, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120107.143356.zip fname=ECN.20120107.143356.zip (ECN.20120107.143356.zip) [2012/09/05 07:48:36.212832, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.141500.zip fname=ECN.20120609.141500.zip (ECN.20120609.141500.zip) [2012/09/05 07:48:36.212860, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.219334, 3] smbd/process.c:1662(process_smb) Transaction 36 of length 130 (0 toread) [2012/09/05 07:48:36.219387, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.219431, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120609.141500.zip continue=0 level = 260 [2012/09/05 07:48:36.219472, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.219496, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,1985977371) [2012/09/05 07:48:36.219531, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110806.113535.zip fname=ECN.20110806.113535.zip (ECN.20110806.113535.zip) [2012/09/05 07:48:36.219569, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./NAME.CSV_old fname=NAME.CSV_old (NAME.CSV_old) [2012/09/05 07:48:36.219607, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20110609.174354.zip fname=ECN.20110609.174354.zip (ECN.20110609.174354.zip) [2012/09/05 07:48:36.219645, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120731.202734.zip fname=ECN.20120731.202734.zip (ECN.20120731.202734.zip) [2012/09/05 07:48:36.219673, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.220089, 3] smbd/process.c:1662(process_smb) Transaction 37 of length 130 (0 toread) [2012/09/05 07:48:36.220132, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.220175, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120731.202734.zip continue=0 level = 260 [2012/09/05 07:48:36.220216, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.220244, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,2088948539) [2012/09/05 07:48:36.220279, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120609.141626.zip fname=ECN.20120609.141626.zip (ECN.20120609.141626.zip) [2012/09/05 07:48:36.220317, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120219.183122.zip fname=ECN.20120219.183122.zip (ECN.20120219.183122.zip) [2012/09/05 07:48:36.220361, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120624.083256.zip fname=ECN.20120624.083256.zip (ECN.20120624.083256.zip) [2012/09/05 07:48:36.220399, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found ./ECN.20120124.213349.zip fname=ECN.20120124.213349.zip (ECN.20120124.213349.zip) [2012/09/05 07:48:36.220426, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=4 [2012/09/05 07:48:36.220844, 3] smbd/process.c:1662(process_smb) Transaction 38 of length 130 (0 toread) [2012/09/05 07:48:36.220887, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.220930, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = ECN.20120124.213349.zip continue=0 level = 260 [2012/09/05 07:48:36.220971, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path . [2012/09/05 07:48:36.220999, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB866A188,2147483647) [2012/09/05 07:48:36.221025, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=. dirtype=22 numentries=0 [2012/09/05 07:48:36.229819, 3] smbd/process.c:1662(process_smb) Transaction 39 of length 41 (0 toread) [2012/09/05 07:48:36.229909, 3] smbd/process.c:1467(switch_message) switch message SMBfindclose (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:36.229951, 3] smbd/trans2.c:8431(reply_findclose) reply_findclose, dptr_num = 256 [2012/09/05 07:48:36.229997, 3] smbd/trans2.c:8437(reply_findclose) SMBfindclose dptr_num = -3 [2012/09/05 07:48:38.547283, 3] smbd/process.c:1662(process_smb) Transaction 40 of length 52 (0 toread) [2012/09/05 07:48:38.547380, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.547450, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [CVCN] [/home/crlb/Win95] [2012/09/05 07:48:38.547480, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: CVCN reduced to /home/crlb/Win95/CVCN [2012/09/05 07:48:38.547518, 3] smbd/reply.c:1178(reply_getatr) reply_getatr: name=CVCN mode=16 size=0 [2012/09/05 07:48:38.548329, 3] smbd/process.c:1662(process_smb) Transaction 41 of length 42 (0 toread) [2012/09/05 07:48:38.548371, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.548414, 3] smbd/reply.c:1178(reply_getatr) reply_getatr: name= mode=18 size=0 [2012/09/05 07:48:38.548707, 3] smbd/process.c:1662(process_smb) Transaction 42 of length 42 (0 toread) [2012/09/05 07:48:38.548749, 3] smbd/process.c:1467(switch_message) switch message SMBgetatr (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.548791, 3] smbd/reply.c:1178(reply_getatr) reply_getatr: name= mode=18 size=0 [2012/09/05 07:48:38.558700, 3] smbd/process.c:1662(process_smb) Transaction 43 of length 94 (0 toread) [2012/09/05 07:48:38.558776, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.558824, 3] smbd/trans2.c:2292(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=0, close_if_end = 0 requires_resume_key = 0 level = 0x104, max_data_bytes = 2432 [2012/09/05 07:48:38.558867, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [CVCN] [/home/crlb/Win95] [2012/09/05 07:48:38.558895, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: CVCN reduced to /home/crlb/Win95/CVCN [2012/09/05 07:48:38.558917, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [.] [/home/crlb/Win95] [2012/09/05 07:48:38.558938, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: . reduced to /home/crlb/Win95 [2012/09/05 07:48:38.558986, 3] smbd/dir.c:578(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2012/09/05 07:48:38.559035, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[CVCN] found ./CVCN fname=CVCN (CVCN) [2012/09/05 07:48:38.559421, 3] smbd/process.c:1662(process_smb) Transaction 44 of length 41 (0 toread) [2012/09/05 07:48:38.559469, 3] smbd/process.c:1467(switch_message) switch message SMBfindclose (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.559516, 3] smbd/trans2.c:8431(reply_findclose) reply_findclose, dptr_num = 256 [2012/09/05 07:48:38.559566, 3] smbd/trans2.c:8437(reply_findclose) SMBfindclose dptr_num = -3 [2012/09/05 07:48:38.562582, 3] smbd/process.c:1662(process_smb) Transaction 45 of length 98 (0 toread) [2012/09/05 07:48:38.562662, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.562722, 3] smbd/trans2.c:2292(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 4, close_after_first=0, close_if_end = 0 requires_resume_key = 0 level = 0x104, max_data_bytes = 2432 [2012/09/05 07:48:38.562773, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [CVCN/*] [/home/crlb/Win95] [2012/09/05 07:48:38.583674, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: CVCN/* reduced to /home/crlb/Win95/CVCN/* [2012/09/05 07:48:38.583743, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [CVCN] [/home/crlb/Win95] [2012/09/05 07:48:38.583781, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: CVCN reduced to /home/crlb/Win95/CVCN [2012/09/05 07:48:38.583823, 3] smbd/dir.c:578(dptr_create) creating new dirptr 256 for path CVCN, expect_close = 1 [2012/09/05 07:48:38.583890, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/. fname=. (.) [2012/09/05 07:48:38.583948, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/.. fname=.. (..) [2012/09/05 07:48:38.584035, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060105.213425.zip fname=CVCN.20060105.213425.zip (CVCN.20060105.213425.zip) [2012/09/05 07:48:38.584104, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060129.184903.zip fname=CVCN.20060129.184903.zip (CVCN.20060129.184903.zip) [2012/09/05 07:48:38.584801, 3] smbd/process.c:1662(process_smb) Transaction 46 of length 132 (0 toread) [2012/09/05 07:48:38.584851, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.584901, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN.20060129.184903.zip continue=0 level = 260 [2012/09/05 07:48:38.584942, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path CVCN [2012/09/05 07:48:38.584965, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB8668010,453387858) [2012/09/05 07:48:38.585007, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCNfy06.txt fname=CVCNfy06.txt (CVCNfy06.txt) [2012/09/05 07:48:38.585049, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060605.204633.zip fname=CVCN.20060605.204633.zip (CVCN.20060605.204633.zip) [2012/09/05 07:48:38.585094, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060321.214444.zip fname=CVCN.20060321.214444.zip (CVCN.20060321.214444.zip) [2012/09/05 07:48:38.585137, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060321.212603.zip fname=CVCN.20060321.212603.zip (CVCN.20060321.212603.zip) [2012/09/05 07:48:38.585167, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=CVCN dirtype=22 numentries=4 [2012/09/05 07:48:38.585548, 3] smbd/process.c:1662(process_smb) Transaction 47 of length 132 (0 toread) [2012/09/05 07:48:38.585595, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.585637, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN.20060321.212603.zip continue=0 level = 260 [2012/09/05 07:48:38.585675, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path CVCN [2012/09/05 07:48:38.585707, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB8668010,815405006) [2012/09/05 07:48:38.585762, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCNTR.XLS fname=CVCNTR.XLS (CVCNTR.XLS) [2012/09/05 07:48:38.585822, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060408.163828.zip fname=CVCN.20060408.163828.zip (CVCN.20060408.163828.zip) [2012/09/05 07:48:38.585883, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060605.204625.zip fname=CVCN.20060605.204625.zip (CVCN.20060605.204625.zip) [2012/09/05 07:48:38.585946, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060605.204658.zip fname=CVCN.20060605.204658.zip (CVCN.20060605.204658.zip) [2012/09/05 07:48:38.585989, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=CVCN dirtype=22 numentries=4 [2012/09/05 07:48:38.586439, 3] smbd/process.c:1662(process_smb) Transaction 48 of length 132 (0 toread) [2012/09/05 07:48:38.586484, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.586528, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN.20060605.204658.zip continue=0 level = 260 [2012/09/05 07:48:38.586569, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path CVCN [2012/09/05 07:48:38.586597, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB8668010,1219296595) [2012/09/05 07:48:38.586637, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060219.165958.zip fname=CVCN.20060219.165958.zip (CVCN.20060219.165958.zip) [2012/09/05 07:48:38.586681, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060605.211727.zip fname=CVCN.20060605.211727.zip (CVCN.20060605.211727.zip) [2012/09/05 07:48:38.586724, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060105.214922.zip fname=CVCN.20060105.214922.zip (CVCN.20060105.214922.zip) [2012/09/05 07:48:38.586766, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060321.203401.zip fname=CVCN.20060321.203401.zip (CVCN.20060321.203401.zip) [2012/09/05 07:48:38.586795, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=CVCN dirtype=22 numentries=4 [2012/09/05 07:48:38.587219, 3] smbd/process.c:1662(process_smb) Transaction 49 of length 132 (0 toread) [2012/09/05 07:48:38.587273, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.587330, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN.20060321.203401.zip continue=0 level = 260 [2012/09/05 07:48:38.587368, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path CVCN [2012/09/05 07:48:38.587390, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB8668010,1681018197) [2012/09/05 07:48:38.587432, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060105.200634.zip fname=CVCN.20060105.200634.zip (CVCN.20060105.200634.zip) [2012/09/05 07:48:38.587475, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060105.210759.zip fname=CVCN.20060105.210759.zip (CVCN.20060105.210759.zip) [2012/09/05 07:48:38.587519, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[*] found CVCN/CVCN.20060105.173905.zip fname=CVCN.20060105.173905.zip (CVCN.20060105.173905.zip) [2012/09/05 07:48:38.587550, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=CVCN dirtype=22 numentries=3 [2012/09/05 07:48:38.587956, 3] smbd/process.c:1662(process_smb) Transaction 50 of length 132 (0 toread) [2012/09/05 07:48:38.588002, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.588046, 3] smbd/trans2.c:2663(call_trans2findnext) call_trans2findnext: dirhandle = 256, max_data_bytes = 2432, maxentries = 4, close_after_request=0, close_if_end = 0 requires_resume_key = 0 resume_key = 0 resume name = CVCN.20060105.173905.zip continue=0 level = 260 [2012/09/05 07:48:38.588088, 3] smbd/dir.c:880(dptr_fetch_lanman2) fetching dirptr 256 for path CVCN [2012/09/05 07:48:38.588114, 3] smbd/trans2.c:2766(call_trans2findnext) dptr_num is 256, mask = *, attr = 16, dirptr=(0xB8668010,-1) [2012/09/05 07:48:38.588139, 3] smbd/trans2.c:2864(call_trans2findnext) SMBtrans2 mask=* directory=CVCN dirtype=22 numentries=0 [2012/09/05 07:48:38.590083, 3] smbd/process.c:1662(process_smb) Transaction 51 of length 41 (0 toread) [2012/09/05 07:48:38.590127, 3] smbd/process.c:1467(switch_message) switch message SMBfindclose (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.590166, 3] smbd/trans2.c:8431(reply_findclose) reply_findclose, dptr_num = 256 [2012/09/05 07:48:38.590212, 3] smbd/trans2.c:8437(reply_findclose) SMBfindclose dptr_num = -3 [2012/09/05 07:48:38.596219, 3] smbd/process.c:1662(process_smb) Transaction 52 of length 94 (0 toread) [2012/09/05 07:48:38.596281, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.596334, 3] smbd/trans2.c:2292(call_trans2findfirst) call_trans2findfirst: dirtype = 1016, maxentries = 4, close_after_first=0, close_if_end = 0 requires_resume_key = 0 level = 0x104, max_data_bytes = 2432 [2012/09/05 07:48:38.596422, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [CVCN] [/home/crlb/Win95] [2012/09/05 07:48:38.596485, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: CVCN reduced to /home/crlb/Win95/CVCN [2012/09/05 07:48:38.596538, 3] smbd/vfs.c:905(check_reduced_name) check_reduced_name [.] [/home/crlb/Win95] [2012/09/05 07:48:38.596589, 3] smbd/vfs.c:1039(check_reduced_name) check_reduced_name: . reduced to /home/crlb/Win95 [2012/09/05 07:48:38.596651, 3] smbd/dir.c:578(dptr_create) creating new dirptr 256 for path ., expect_close = 1 [2012/09/05 07:48:38.596770, 3] smbd/dir.c:1041(smbd_dirptr_get_entry) smbd_dirptr_get_entry mask=[CVCN] found ./CVCN fname=CVCN (CVCN) [2012/09/05 07:48:38.599500, 3] smbd/process.c:1662(process_smb) Transaction 53 of length 41 (0 toread) [2012/09/05 07:48:38.599596, 3] smbd/process.c:1467(switch_message) switch message SMBfindclose (pid 4393) conn 0xb866dd10 [2012/09/05 07:48:38.599624, 3] smbd/trans2.c:8431(reply_findclose) reply_findclose, dptr_num = 256 [2012/09/05 07:48:38.599655, 3] smbd/trans2.c:8437(reply_findclose) SMBfindclose dptr_num = -3 [2012/09/05 07:51:30.361419, 3] smbd/process.c:1662(process_smb) Transaction 54 of length 90 (0 toread) [2012/09/05 07:51:30.361534, 3] smbd/process.c:1467(switch_message) switch message SMBtrans2 (pid 4393) conn 0xb866dd10 [2012/09/05 07:51:30.361593, 3] smbd/trans2.c:3513(call_trans2qfsinfo) call_trans2qfsinfo: level = 261 [2012/09/05 07:51:30.361625, 3] smbd/trans2.c:2951(smbd_do_qfsinfo) smbd_do_qfsinfo: level = 261