Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [2016/04/30 11:51:50.867425, 3, pid=23588, effective(0, 0), real(0, 0)] auth/auth.c:219(check_ntlm_password)
- check_ntlm_password: Checking password for unmapped user []\[]@[PC209-03] with the new password interface
- [2016/04/30 11:51:50.867468, 3, pid=23588, effective(0, 0), real(0, 0)] auth/auth.c:222(check_ntlm_password)
- check_ntlm_password: mapped user is: [WORKGROUP_NAME]\[]@[PC209-03]
- [2016/04/30 11:51:50.867515, 3, pid=23588, effective(0, 0), real(0, 0)] auth/auth.c:268(check_ntlm_password)
- check_ntlm_password: guest authentication for user [] succeeded
- [2016/04/30 11:51:50.867725, 2, pid=23588, effective(0, 0), real(0, 0)] lib/smbldap.c:1018(smbldap_open_connection)
- smbldap_open_connection: connection opened
- [2016/04/30 11:51:50.868496, 3, pid=23588, effective(0, 0), real(0, 0)] lib/smbldap.c:1240(smbldap_connect_system)
- ldap_connect_system: successful connection to the LDAP server
- [2016/04/30 11:51:50.871424, 3, pid=23588, effective(0, 0), real(0, 0)] ../libcli/auth/ntlmssp_sign.c:535(ntlmssp_sign_init)
- NTLMSSP Sign/Seal - Initialising with flags:
- [2016/04/30 11:51:50.871486, 3, pid=23588, effective(0, 0), real(0, 0)] ../libcli/auth/ntlmssp.c:34(debug_ntlmssp_flags)
- Got NTLMSSP neg_flags=0xe2088215
- [2016/04/30 11:51:50.871550, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/password.c:298(register_existing_vuid)
- register_existing_vuid: User name: nobody Real name:
- [2016/04/30 11:51:50.871585, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/password.c:308(register_existing_vuid)
- register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
- [2016/04/30 11:51:50.872211, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 3 of length 80 (0 toread)
- [2016/04/30 11:51:50.872291, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBtconX (pid 23588) conn 0x0
- [2016/04/30 11:51:50.872402, 3, pid=23588, effective(0, 0), real(0, 0)] lib/access.c:338(allow_access)
- Allowed connection from 10.1.40.3 (10.1.40.3)
- [2016/04/30 11:51:50.872465, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/service.c:872(make_connection_snum)
- Connect path is '/tmp' for service [IPC$]
- [2016/04/30 11:51:50.872528, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/vfs.c:102(vfs_init_default)
- Initialising default vfs hooks
- [2016/04/30 11:51:50.872570, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/vfs.c:128(vfs_init_custom)
- Initialising custom vfs hooks from [/[Default VFS]/]
- [2016/04/30 11:51:50.872699, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/service.c:1114(make_connection_snum)
- pc209-03 (10.1.40.3) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 23588)
- [2016/04/30 11:51:50.872744, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/reply.c:871(reply_tcon_and_X)
- tconX service=IPC$
- [2016/04/30 11:51:50.873181, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 4 of length 108 (0 toread)
- [2016/04/30 11:51:50.873236, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBntcreateX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.873761, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 5 of length 76 (0 toread)
- [2016/04/30 11:51:50.873830, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBtrans2 (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.874368, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 6 of length 184 (0 toread)
- [2016/04/30 11:51:50.874423, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.874499, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1008(api_pipe_bind_req)
- api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
- [2016/04/30 11:51:50.874545, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:352(check_bind_req)
- check_bind_req for \netlogon
- [2016/04/30 11:51:50.874583, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:392(check_bind_req)
- check_bind_req: netlogon -> netlogon rpc service
- [2016/04/30 11:51:50.874645, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=116
- [2016/04/30 11:51:50.875034, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 7 of length 63 (0 toread)
- [2016/04/30 11:51:50.875089, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.875136, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 30
- [2016/04/30 11:51:50.875185, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=72
- [2016/04/30 11:51:50.875627, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 8 of length 162 (0 toread)
- [2016/04/30 11:51:50.875688, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.875786, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1897(api_rpcTNP)
- api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
- [2016/04/30 11:51:50.875861, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=94
- [2016/04/30 11:51:50.876238, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 9 of length 63 (0 toread)
- [2016/04/30 11:51:50.876286, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.876342, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 30
- [2016/04/30 11:51:50.876383, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=36
- [2016/04/30 11:51:50.877026, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 10 of length 204 (0 toread)
- [2016/04/30 11:51:50.877080, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.877148, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1897(api_rpcTNP)
- api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
- [2016/04/30 11:51:50.877299, 2, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:3976(_samr_LookupDomain
- )
- Returning domain sid for domain WORKGROUP_NAME -> S-1-5-21-4199950535-4215296931-1234567891
- [2016/04/30 11:51:50.877787, 2, pid=23588, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:553(init_sam_from_ldap)
- init_sam_from_ldap: Entry found for user: pc209-03$
- [2016/04/30 11:51:50.878788, 2, pid=23588, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2427(init_group_from_ldap)
- init_group_from_ldap: Entry found for group: 515
- [2016/04/30 11:51:50.879317, 2, pid=23588, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2427(init_group_from_ldap)
- init_group_from_ldap: Entry found for group: 515
- [2016/04/30 11:51:50.879609, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd)
- Closed policy
- [2016/04/30 11:51:50.879656, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd)
- Closed policy
- [2016/04/30 11:51:50.879777, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2916(_samr_Quer
- yUserInfo)
- User:[pc209-03$]
- [2016/04/30 11:51:50.879899, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2916(_samr_QueryUserInf
- o)
- User:[pc209-03$]
- [2016/04/30 11:51:50.879986, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2619(get_user_info_18)
- User:[pc209-03$] 0x80
- [2016/04/30 11:51:50.880058, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd
- )
- Closed policy
- *** [2016/04/30 11:51:50.880189, 2, pid=23588, effective(65534, 65534), real(0, 0)] ../libcli/auth/credentials.c:308(netlogon_cre
- *** ds_server_check_internal)
- *** credentials check failed
- *** [2016/04/30 11:51:50.880225, 0, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/netlogon/srv_netlog_nt.c:976(_netr
- *** _ServerAuthenticate3)
- *** _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PC209-03 machine account P
- *** C209-03$
- [2016/04/30 11:51:50.880288, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=136
- [2016/04/30 11:51:50.880709, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 11 of length 63 (0 toread)
- [2016/04/30 11:51:50.880760, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.880809, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 30
- [2016/04/30 11:51:50.880849, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=44
- [2016/04/30 11:51:50.881397, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 12 of length 162 (0 toread)
- [2016/04/30 11:51:50.881453, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.881527, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1897(api_rpcTNP)
- api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE
- [2016/04/30 11:51:50.881590, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=94
- [2016/04/30 11:51:50.881978, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 13 of length 63 (0 toread)
- [2016/04/30 11:51:50.882027, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.882078, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 30
- [2016/04/30 11:51:50.882117, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=36
- [2016/04/30 11:51:50.882677, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 14 of length 204 (0 toread)
- [2016/04/30 11:51:50.882732, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.882796, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1897(api_rpcTNP)
- api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3
- [2016/04/30 11:51:50.882894, 2, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:3976(_samr_LookupDomain
- )
- Returning domain sid for domain WORKGROUP_NAME -> S-1-5-21-4199950535-4215296931-1234567891
- [2016/04/30 11:51:50.883249, 2, pid=23588, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:553(init_sam_from_ldap)
- init_sam_from_ldap: Entry found for user: pc209-03$
- [2016/04/30 11:51:50.883940, 2, pid=23588, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2427(init_group_from_ldap)
- init_group_from_ldap: Entry found for group: 515
- [2016/04/30 11:51:50.884218, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd)
- Closed policy
- [2016/04/30 11:51:50.884266, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd)
- Closed policy
- [2016/04/30 11:51:50.884378, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2916(_samr_Quer
- yUserInfo)
- User:[pc209-03$]
- [2016/04/30 11:51:50.884494, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2916(_samr_QueryUserInf
- o)
- User:[pc209-03$]
- [2016/04/30 11:51:50.884582, 3, pid=23588, effective(0, 0), real(0, 0)] rpc_server/samr/srv_samr_nt.c:2619(get_user_info_18)
- User:[pc209-03$] 0x80
- [2016/04/30 11:51:50.884639, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/rpc_handles.c:281(close_policy_hnd
- )
- Closed policy
- [2016/04/30 11:51:50.884800, 3, pid=23588, effective(0, 0), real(0, 0)] ../libcli/auth/schannel_state_tdb.c:109(schannel_stor
- e_session_key_tdb)
- schannel_store_session_key_tdb: stored schannel info with key SECRETS/SCHANNEL/PC209-03
- [2016/04/30 11:51:50.884871, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=136
- [2016/04/30 11:51:50.885277, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 15 of length 63 (0 toread)
- [2016/04/30 11:51:50.885330, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.885379, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 197
- [2016/04/30 11:51:50.885426, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=44
- [2016/04/30 11:51:50.886128, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 16 of length 108 (0 toread)
- [2016/04/30 11:51:50.886185, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBntcreateX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.886799, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 17 of length 185 (0 toread)
- [2016/04/30 11:51:50.886846, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.886900, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1008(api_pipe_bind_req)
- api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon
- [2016/04/30 11:51:50.886935, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:352(check_bind_req)
- check_bind_req for \netlogon
- [2016/04/30 11:51:50.886969, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:392(check_bind_req)
- check_bind_req: netlogon -> netlogon rpc service
- [2016/04/30 11:51:50.887053, 3, pid=23588, effective(0, 0), real(0, 0)] ../libcli/auth/schannel_state_tdb.c:179(schannel_fetc
- h_session_key_tdb)
- schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/PC209-03
- [2016/04/30 11:51:50.887112, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=117
- [2016/04/30 11:51:50.887504, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 18 of length 63 (0 toread)
- [2016/04/30 11:51:50.887559, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.887604, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 30
- [2016/04/30 11:51:50.887645, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=92
- [2016/04/30 11:51:50.888167, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 19 of length 268 (0 toread)
- [2016/04/30 11:51:50.888213, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBwriteX (pid 23588) conn 0x7fb6186ae130
- *** [2016/04/30 11:51:50.888297, 1, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe.c:1845(api_pipe_request)
- *** srv_pipe_check_verification_trailer: failed
- [2016/04/30 11:51:50.888346, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:361(pipe_write_andx_done)
- writeX-IPC nwritten=200
- [2016/04/30 11:51:50.888721, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 20 of length 63 (0 toread)
- [2016/04/30 11:51:50.888775, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBreadX (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.888836, 3, pid=23588, effective(65534, 65534), real(0, 0)] rpc_server/srv_pipe_hnd.c:121(free_pipe_conte
- xt)
- free_pipe_context: destroying talloc pool of size 34
- [2016/04/30 11:51:50.888879, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/pipes.c:485(pipe_read_andx_done)
- readX-IPC min=1024 max=1024 nread=32
- [2016/04/30 11:51:50.889262, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 21 of length 45 (0 toread)
- [2016/04/30 11:51:50.889307, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBclose (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.889355, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/reply.c:4848(reply_close)
- close fd=-1 fnum=11283 (numopen=2)
- [2016/04/30 11:51:50.889853, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 22 of length 45 (0 toread)
- [2016/04/30 11:51:50.889907, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBclose (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:51:50.889948, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/reply.c:4848(reply_close)
- close fd=-1 fnum=11282 (numopen=1)
- [2016/04/30 11:52:03.562098, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 23 of length 39 (0 toread)
- [2016/04/30 11:52:03.562155, 3, pid=23588, effective(65534, 65534), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBtdis (pid 23588) conn 0x7fb6186ae130
- [2016/04/30 11:52:03.562206, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/service.c:1378(close_cnum)
- pc209-03 (10.1.40.3) closed connection to service IPC$
- [2016/04/30 11:52:03.562244, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/connection.c:35(yield_connection)
- Yielding connection to IPC$
- [2016/04/30 11:52:03.562607, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1662(process_smb)
- Transaction 24 of length 43 (0 toread)
- [2016/04/30 11:52:03.562660, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:1467(switch_message)
- switch message SMBulogoffX (pid 23588) conn 0x0
- [2016/04/30 11:52:03.562716, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/reply.c:2096(reply_ulogoffX)
- ulogoffX vuid=100
- *** [2016/04/30 11:52:03.563257, 1, pid=23588, effective(0, 0), real(0, 0)] smbd/process.c:457(receive_smb_talloc)
- *** receive_smb_raw_talloc failed for client 10.1.40.3 read error = NT_STATUS_CONNECTION_RESET.
- *** [2016/04/30 11:52:03.563432, 3, pid=23588, effective(0, 0), real(0, 0)] smbd/server_exit.c:181(exit_server_common)
- *** Server exit (failed to receive smb request)
Add Comment
Please, Sign In to add comment