[2008/02/07 18:46:08, 0] smbd/service.c:make_connection_snum(911)
  '/home/scum/ftp_folder' does not exist or permission denied when connecting to [ftp_folder] Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:08, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to ftp_folder
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
  error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_BAD_NETWORK_NAME
[2008/02/07 18:46:08, 3] smbd/process.c:process_smb(1110)
  Transaction 378 of length 148
[2008/02/07 18:46:08, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans2 (pid 10672) conn 0x975b788
[2008/02/07 18:46:08, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:08, 3] smbd/vfs.c:vfs_init_default(219)
  Initialising default vfs hooks
[2008/02/07 18:46:08, 3] smbd/msdfs.c:create_conn_struct(165)
  create_conn_struct: Can't ChDir to new conn path /home/scum/ftp_folder. Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:unix_error_packet(90)
  unix_error_packet: error string = Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
  error packet at smbd/trans2.c(4945) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
[2008/02/07 18:46:08, 3] smbd/process.c:process_smb(1110)
  Transaction 379 of length 148
[2008/02/07 18:46:08, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans2 (pid 10672) conn 0x975b788
[2008/02/07 18:46:08, 3] smbd/vfs.c:vfs_init_default(219)
  Initialising default vfs hooks
[2008/02/07 18:46:08, 3] smbd/msdfs.c:create_conn_struct(165)
  create_conn_struct: Can't ChDir to new conn path /home/scum/ftp_folder. Error was Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:unix_error_packet(90)
  unix_error_packet: error string = Отказано в доступе
[2008/02/07 18:46:08, 3] smbd/error.c:error_packet(146)
  error packet at smbd/trans2.c(4945) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 380 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 381 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72a7 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 382 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72a7 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 383 of length 188
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=100 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72a7)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 384
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 384 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 385 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 386 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72a8 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 387 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72a8 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 388 of length 188
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=100 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72a8)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 384
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 389 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 390 of length 106
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe spoolss opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 391 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\spoolss
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72a9 nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 392 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72a9 min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 393 of length 290
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=202 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 72a9)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 71
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
  checking name: \\192.168.0.13
[2008/02/07 18:46:12, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(408)
  Setting printer type=\\192.168.0.13
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 154
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 394 of length 132
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 72a9)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2008/02/07 18:46:12, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 395 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 396 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 397 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72aa nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 398 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72aa min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 399 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72aa)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 106
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 400 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 401 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 402 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72ab nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 403 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72ab min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 404 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72ab)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 174
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 405 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 406 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 407 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72ac nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 408 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72ac min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 409 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72ac)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 106
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 410 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 411 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 412 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72ad nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 413 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72ad min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 414 of length 164
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=76 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72ad)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 174
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 415 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 416 of length 104
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe winreg opening.
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 417 of length 140
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\winreg
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72ae nwritten=72
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 418 of length 63
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72ae min=1024 max=1024 nread=68
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 419 of length 124
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=36 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_OPEN_HKLM
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:12, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:12, 3] lib/util_seaccess.c:se_access_check(250)
[2008/02/07 18:46:12, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-4196362445-2381206132-4151649169-2000
  se_access_check: also S-1-22-2-500
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 510
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 420 of length 232
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=144 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 86
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 421 of length 132
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10672) conn 0x9758b28
[2008/02/07 18:46:12, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:12, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:12, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72ae)
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_CLOSE
[2008/02/07 18:46:12, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2008/02/07 18:46:12, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:12, 3] smbd/process.c:process_smb(1110)
  Transaction 422 of length 45
[2008/02/07 18:46:12, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10672) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 121 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 122 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c3 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 123 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c3 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 124 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72c3)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 125 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 126 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 127 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c4 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 128 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c4 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 129 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72c4)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 130 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 131 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 132 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c5 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 133 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c5 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 134 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72c5)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 135 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 136 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 137 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c6 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 138 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c6 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 139 of length 172
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=84 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72c6)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 368
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 140 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 141 of length 106
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe spoolss opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 142 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\spoolss
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c7 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 143 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c7 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 144 of length 274
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=186 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 72c7)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 71
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
  checking name: \\Fred
[2008/02/07 18:46:13, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(408)
  Setting printer type=\\Fred
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 138
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 145 of length 132
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 72c7)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2008/02/07 18:46:13, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 146 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 147 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 148 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c8 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 149 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c8 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 150 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72c8)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 151 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 152 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 153 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72c9 nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 154 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72c9 min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 155 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72c9)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 156 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 157 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe wkssvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 158 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\wkssvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72ca nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 159 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72ca min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 160 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "wkssvc" (pnum 72ca)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: WKS_Q_QUERY_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 90
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 161 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 162 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe srvsvc opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 163 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\srvsvc
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72cb nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 164 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72cb min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 165 of length 148
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=60 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "srvsvc" (pnum 72cb)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SRV_NET_SRV_GET_INFO
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 158
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 166 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 167 of length 104
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBntcreateX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/nttrans.c:nt_open_pipe(346)
  nt_open_pipe: Known pipe winreg opening.
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 168 of length 140
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBwriteX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:check_bind_req(985)
  check_bind_req for \PIPE\winreg
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
  writeX-IPC pnum=72cc nwritten=72
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 169 of length 63
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBreadX (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
  readX-IPC pnum=72cc min=1024 max=1024 nread=68
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 170 of length 124
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=36 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 70
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_OPEN_HKLM
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(500, 500) : sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] lib/util_seaccess.c:se_access_check(250)
[2008/02/07 18:46:13, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-4196362445-2381206132-4151649169-2000
  se_access_check: also S-1-22-2-500
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-11
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 510
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 171 of length 232
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=144 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_OPEN_ENTRY
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 86
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 172 of length 132
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBtrans (pid 10671) conn 0x9758b28
[2008/02/07 18:46:13, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=44 params=0 setup=2
[2008/02/07 18:46:13, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2008/02/07 18:46:13, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "winreg" (pnum 72cc)
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: REG_CLOSE
[2008/02/07 18:46:13, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
  Closed policy
[2008/02/07 18:46:13, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2008/02/07 18:46:13, 3] smbd/process.c:process_smb(1110)
  Transaction 173 of length 45
[2008/02/07 18:46:13, 3] smbd/process.c:switch_message(914)
  switch message SMBclose (pid 10671) conn 0x9758b28
[2008/02/07 18:47:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:47:12, 3] smbd/process.c:check_reload(1340)
  Printcap cache time expired.
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(117)
  reloading printcap cache
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(223)
  reload status: ok
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(117)
  reloading printcap cache
[2008/02/07 18:47:12, 3] printing/pcap.c:pcap_cache_reload(223)
  reload status: ok
[2008/02/07 18:47:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:47:13, 3] smbd/process.c:check_reload(1340)
  Printcap cache time expired.
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(117)
  reloading printcap cache
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(223)
  reload status: ok
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(117)
  reloading printcap cache
[2008/02/07 18:47:13, 3] printing/pcap.c:pcap_cache_reload(223)
  reload status: ok
[2008/02/07 18:48:12, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/07 18:48:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0