[2010/08/27 00:41:09.612982,  3] smbd/process.c:1294(switch_message)
  switch message SMBwriteX (pid 2465) conn 0x7f371f031010
[2010/08/27 00:41:09.613001,  3] smbd/reply.c:4418(reply_write_and_X)
  writeX fnum=9596 num=65536 wrote=65536
[2010/08/27 00:41:09.614228,  3] smbd/process.c:1485(process_smb)
  Transaction 2187662 of length 65604 (0 toread)
[2010/08/27 00:41:09.614245,  3] smbd/process.c:1294(switch_message)
  switch message SMBwriteX (pid 2465) conn 0x7f371f031010
[2010/08/27 00:41:09.614260,  3] smbd/reply.c:4418(reply_write_and_X)
  writeX fnum=9596 num=65536 wrote=65536
[2010/08/27 00:41:09.615403,  3] smbd/process.c:1485(process_smb)
  Transaction 2187663 of length 65604 (0 toread)
[2010/08/27 00:41:09.615426,  3] smbd/process.c:1294(switch_message)
  switch message SMBwriteX (pid 2465) conn 0x7f371f031010
[2010/08/27 00:41:09.615438,  3] smbd/fileio.c:758(write_file)
  WRITE_FLUSH:1: due to noncontinuous write: fd = 30, size = 21032885248, pos = 21031112704, n = 45056, wcp->offset=21030850560, wcp->data_size=262144

--- Odd 30 second delay here, new PID shows up.  Windows logs the failure at 00:42 ---

[2010/08/27 00:42:43.977349,  3] smbd/process.c:1485(process_smb)
  Transaction 0 of length 137 (0 toread)
[2010/08/27 00:42:43.990203,  3] smbd/process.c:1294(switch_message)
  switch message SMBnegprot (pid 2673) conn 0x0
[2010/08/27 00:42:43.990215,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/08/27 00:42:44.162125,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2010/08/27 00:42:44.162148,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [LANMAN1.0]
[2010/08/27 00:42:44.162157,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [Windows for Workgroups 3.1a]

from log.smbd - cleanup starts at 00:43
[2010/08/27 00:43:05.581117,  3] smbd/server.c:259(remove_child_pid)
  smbd/server.c:259 Unclean shutdown of pid 2465
[2010/08/27 00:43:05.595936,  1] smbd/server.c:267(remove_child_pid)
  Scheduled cleanup of brl and lock database after unclean shutdown
[2010/08/27 00:43:25.600196,  1] smbd/server.c:240(cleanup_timeout_fn)
  Cleaning up brl and lock database after unclean shutdown