Session logs
Atftpd Log
These files are asked directly (i.e. the request does not start with "\", so you should use the same filename case as the client asks: Jul 16 23:07:38 attila atftpd[4619.-1219101808]: Serving winxp.0 to 192.168.129.121:57103 <- PXE Loader Jul 16 23:07:38 attila atftpd[4619.-1219101808]: Serving XPLDR to 192.168.129.121:2072 <- NTLDR Jul 16 23:07:38 attila atftpd[4619.-1219101808]: Serving BOOTFONT.BIN to 192.168.129.121:52753 Jul 16 23:07:38 attila atftpd[4619.-1219101808]: Serving ntdetect.wxp to 192.168.129.121:52754 <- ntdetect.com Jul 16 23:07:42 attila atftpd[4619.-1219101808]: Serving winxp.sif to 192.168.129.121:52755 <- winnt.sif These files are prefixed by "\" so the file case patch does case insensitive lookup, winxp is a link on my setup /tftpbooot/winxp -> /mnt/disk/ris/winxp, please note that hta tftpd does not allow links inside the tftp root so you must put files inside the directory. Jul 16 23:07:43 attila atftpd[4619.-1219101808]: Serving winxp/I386/TXTSETUP.SIF to 192.168.129.121:52757 Jul 16 23:07:43 attila atftpd[4619.-1219101808]: Serving winxp/I386/BIOSINFO.INF to 192.168.129.121:52759 Jul 16 23:07:43 attila atftpd[4619.-1219101808]: Serving winxp/I386/DRVMAIN.SDB to 192.168.129.121:52761 Jul 16 23:07:49 attila atftpd[4619.-1219101808]: Serving winxp/I386/HALAACPI.DL_ to 192.168.129.121:52766 Jul 16 23:07:49 attila atftpd[4619.-1219101808]: Serving winxp/I386/NTOSKRNL.EX_ to 192.168.129.121:52767 Jul 16 23:07:50 attila atftpd[4619.-1219101808]: Serving winxp/I386/KDCOM.DL_ to 192.168.129.121:52768 Jul 16 23:07:50 attila atftpd[4619.-1219101808]: Serving winxp/I386/BOOTVID.DL_ to 192.168.129.121:52769 Jul 16 23:07:50 attila atftpd[4619.-1219101808]: Serving winxp/I386/SETUPREG.HIV to 192.168.129.121:52771 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/VGA850.FO_ to 192.168.129.121:52772 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/C_1252.NL_ to 192.168.129.121:52773 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/C_850.NL_ to 192.168.129.121:52774 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/L_INTL.NL_ to 192.168.129.121:52775 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/C_1252.NL_ to 192.168.129.121:52776 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/C_850.NL_ to 192.168.129.121:52777 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/L_INTL.NL_ to 192.168.129.121:52778 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/SETUPDD.SY_ to 192.168.129.121:52779 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/SPDDLANG.SY_ to 192.168.129.121:52780 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/PCI.SY_ to 192.168.129.121:52781 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/ACPI.SY_ to 192.168.129.121:52782 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/WMILIB.SY_ to 192.168.129.121:52783 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/ISAPNP.SY_ to 192.168.129.121:52784 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/ACPIEC.SY_ to 192.168.129.121:52785 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/OPRGHDLR.SY_ to 192.168.129.121:52786 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/OHCI1394.SY_ to 192.168.129.121:52787 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/1394BUS.SY_ to 192.168.129.121:52788 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/PCMCIA.SY_ to 192.168.129.121:52789 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/PCIIDE.SY_ to 192.168.129.121:52790 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/PCIIDEX.SY_ to 192.168.129.121:52791 Jul 16 23:07:51 attila atftpd[4619.-1219101808]: Serving winxp/I386/INTELIDE.SY_ to 192.168.129.121:52792 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/VIAIDE.SY_ to 192.168.129.121:52793 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/CMDIDE.SY_ to 192.168.129.121:52794 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/TOSIDE.SY_ to 192.168.129.121:52795 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/ALIIDE.SY_ to 192.168.129.121:52796 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/MOUNTMGR.SY_ to 192.168.129.121:52797 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/FTDISK.SY_ to 192.168.129.121:52798 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/PARTMGR.SY_ to 192.168.129.121:52799 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/FDC.SY_ to 192.168.129.121:52800 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/DMLOAD.SY_ to 192.168.129.121:52801 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/DMIO.SY_ to 192.168.129.121:52802 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/SBP2PORT.SY_ to 192.168.129.121:52803 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/LBRTFDC.SY_ to 192.168.129.121:52804 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/usbehci.sy_ to 192.168.129.121:52805 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBPORT.SY_ to 192.168.129.121:52806 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBOHCI.SY_ to 192.168.129.121:52807 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBUHCI.SY_ to 192.168.129.121:52808 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBHUB.SY_ to 192.168.129.121:52809 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBD.SY_ to 192.168.129.121:52810 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBCCGP.SY_ to 192.168.129.121:52811 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/HIDUSB.SY_ to 192.168.129.121:52812 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/HIDCLASS.SY_ to 192.168.129.121:52813 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/HIDPARSE.SY_ to 192.168.129.121:52814 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/SERIAL.SY_ to 192.168.129.121:52815 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/SERENUM.SY_ to 192.168.129.121:52816 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/USBSTOR.SY_ to 192.168.129.121:52817 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/VGA.SY_ to 192.168.129.121:52818 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/VIDEOPRT.SY_ to 192.168.129.121:52819 Jul 16 23:07:52 attila atftpd[4619.-1219101808]: Serving winxp/I386/I8042PRT.SY_ to 192.168.129.121:52820 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/KBDHID.SY_ to 192.168.129.121:52821 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/KBDCLASS.SY_ to 192.168.129.121:52822 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SCSIPORT.SY_ to 192.168.129.121:52823 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/CPQARRAY.SY_ to 192.168.129.121:52824 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ATAPI.SY_ to 192.168.129.121:52825 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/AHA154X.SY_ to 192.168.129.121:52826 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SPARROW.SY_ to 192.168.129.121:52827 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SYMC810.SY_ to 192.168.129.121:52828 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/AIC78XX.SY_ to 192.168.129.121:52829 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/I2OMP.SY_ to 192.168.129.121:52830 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/DAC960NT.SY_ to 192.168.129.121:52831 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/QL10WNT.SY_ to 192.168.129.121:52832 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/AMSINT.SY_ to 192.168.129.121:52833 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ASC.SY_ to 192.168.129.121:52834 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ASC3550.SY_ to 192.168.129.121:52835 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/MRAID35X.SY_ to 192.168.129.121:52836 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/INI910U.SY_ to 192.168.129.121:52837 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/QL1240.SY_ to 192.168.129.121:52838 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/AIC78U2.SY_ to 192.168.129.121:52839 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SYMC8XX.SY_ to 192.168.129.121:52840 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SYM_HI.SY_ to 192.168.129.121:52841 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/SYM_U3.SY_ to 192.168.129.121:52842 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ASC3350P.SY_ to 192.168.129.121:52843 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ABP480N5.SY_ to 192.168.129.121:52844 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/CD20XRNT.SY_ to 192.168.129.121:52845 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ULTRA.SY_ to 192.168.129.121:52846 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/ADPU160M.SY_ to 192.168.129.121:52847 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/DPTI2O.SY_ to 192.168.129.121:52848 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/QL1080.SY_ to 192.168.129.121:52849 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/QL1280.SY_ to 192.168.129.121:52850 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/QL12160.SY_ to 192.168.129.121:52851 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/PERC2.SY_ to 192.168.129.121:52852 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/HPN.SY_ to 192.168.129.121:52853 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/CBIDF2K.SY_ to 192.168.129.121:52854 Jul 16 23:07:53 attila atftpd[4619.-1219101808]: Serving winxp/I386/DAC2W2K.SY_ to 192.168.129.121:52855 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/DMBOOT.SY_ to 192.168.129.121:52856 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/FLPYDISK.SY_ to 192.168.129.121:52857 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/CDROM.SY_ to 192.168.129.121:52858 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/CLASSPNP.SY_ to 192.168.129.121:52859 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/DISK.SY_ to 192.168.129.121:52860 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/SFLOPPY.SY_ to 192.168.129.121:52861 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/RAMDISK.SY_ to 192.168.129.121:52862 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/KSECDD.SYS to 192.168.129.121:52864 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/FASTFAT.SY_ to 192.168.129.121:52865 Jul 16 23:07:54 attila atftpd[4619.-1219101808]: Serving winxp/I386/NTFS.SYS to 192.168.129.121:52867 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/CDFS.SY_ to 192.168.129.121:52868 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/NDIS.SY_ to 192.168.129.121:52869 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/IPSEC.SY_ to 192.168.129.121:52870 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/tcpip.sys to 192.168.129.121:52872 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/TDI.SY_ to 192.168.129.121:52873 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/ipnat.sys to 192.168.129.121:52875 Jul 16 23:07:55 attila atftpd[4619.-1219101808]: Serving winxp/I386/NETBT.SY_ to 192.168.129.121:52876 This is the network driver that binlsrv tells the client to use Jul 16 23:07:56 attila atftpd[4619.-1219101808]: Serving winxp/I386/pcntpci5.sys to 192.168.129.121:52878 Jul 16 23:07:56 attila atftpd[4619.-1210709104]: Serving winxp/I386/rdbss.sys to 192.168.129.121:52880 Jul 16 23:07:56 attila atftpd[4619.-1210709104]: Serving winxp/I386/MUP.SY_ to 192.168.129.121:52881 This is the last file sent using tftp, it's the smb drivers so the client now starts to take files using samba/windows share Jul 16 23:07:56 attila atftpd[4619.-1210709104]: Serving winxp/I386/mrxsmb.sys to 192.168.129.121:52883
Samba Log
[2007/07/16 23:27:03, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/07/16 23:27:03, 1] smbd/service.c:make_connection_snum(1033) _ (192.168.129.121) connect to service Reminst initially as user nobody (uid=65534, gid=65534) (pid 12368) [2007/07/16 23:27:03, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/SYSTEM32/NTDLL.DLL read=No write=No (numopen=1) [2007/07/16 23:27:03, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/SYSTEM32/SMSS.EXE read=No write=No (numopen=2) [2007/07/16 23:27:04, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/KBDIT.DLL read=No write=No (numopen=3) [2007/07/16 23:27:04, 2] smbd/close.c:close_normal_file(399) nobody closed file winxp/I386/KBDIT.DLL (numopen=2) NT_STATUS_OK [2007/07/16 23:27:04, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/KBDIT.DLL read=No write=No (numopen=3) [2007/07/16 23:27:04, 2] smbd/close.c:close_normal_file(399) nobody closed file winxp/I386/KBDIT.DLL (numopen=2) NT_STATUS_OK [2007/07/16 23:27:04, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/KBDIT.DLL read=No write=No (numopen=3) [2007/07/16 23:27:04, 2] smbd/close.c:close_normal_file(399) nobody closed file winxp/I386/KBDIT.DLL (numopen=2) NT_STATUS_OK [2007/07/16 23:27:04, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/KBDIT.DLL read=No write=No (numopen=3) [2007/07/16 23:27:06, 2] smbd/open.c:open_file(391) nobody opened file winxp/I386/SETUPP.INI read=Yes write=No (numopen=4)