SEC_VT: consumed 16 bytes SEC_VT: struct dcerpc_sec_verification_trailer _pad : DATA_BLOB length=0 magic : 8ae3137102f43671 count: struct dcerpc_sec_vt_count count : 0x0001 (1) commands: ARRAY(1) commands: struct dcerpc_sec_vt command : 0x4001 (16385) 0x01: DCERPC_SEC_VT_COMMAND_ENUM (1) 1: DCERPC_SEC_VT_COMMAND_END 0: DCERPC_SEC_VT_MUST_PROCESS u : union dcerpc_sec_vt_union(case 0x1) bitmask1 : 0x00000001 (1) 1: DCERPC_SEC_VT_CLIENT_SUPPORTS_HEADER_SIGNING pull returned NT_STATUS_OK 3: struct drsuapi_DsGetNCChanges in: struct drsuapi_DsGetNCChanges bind_handle : * bind_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : df2224dd-99d3-4ad8-ba90-20f093aed3ad level : 0x00000008 (8) req : * req : union drsuapi_DsGetNCChangesRequest(case 8) req8: struct drsuapi_DsGetNCChangesRequest8 destination_dsa_guid : ae22e205-5f46-48ef-b165-27df4468843b source_dsa_invocation_id : 12061d35-17ef-4389-92a2-6c9ff7aa0e74 naming_context : * naming_context: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x0000005c (92) __ndr_size_sid : 0x00000018 (24) guid : b9750df0-070f-4a1e-93b1-81a4fcf41d77 sid : S-1-5-21-8659820-343394492-589173015 __ndr_size_dn : 0x00000011 (17) dn : 'DC=company3,DC=dd' highwatermark: struct drsuapi_DsReplicaHighWaterMark tmp_highest_usn : 0x0000000000002682 (9858) reserved_usn : 0x0000000000000000 (0) highest_usn : 0x0000000000002682 (9858) uptodateness_vector : * uptodateness_vector: struct drsuapi_DsReplicaCursorCtrEx version : 0x00000001 (1) reserved1 : 0x00000000 (0) count : 0x00000007 (7) reserved2 : 0x00000000 (0) cursors: ARRAY(7) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : 12061d35-17ef-4389-92a2-6c9ff7aa0e74 highest_usn : 0x0000000000002682 (9858) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : 2f1bbc0d-282d-4d82-bd98-dd7900549a09 highest_usn : 0x0000000000002675 (9845) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : 49b93e65-a0cb-4afb-a3c6-b2831ed68d6b highest_usn : 0x000000000000265f (9823) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : 9fcdd1be-926a-4416-8000-e96ec6f2f3fe highest_usn : 0x0000000000002675 (9845) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : ae22e205-5f46-48ef-b165-27df4468843b highest_usn : 0x000000000000d606 (54790) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : bcd94c34-abf2-4550-8888-2cfcc6c226b9 highest_usn : 0x000000000000266c (9836) cursors: struct drsuapi_DsReplicaCursor source_dsa_invocation_id : fe3e1e0d-e704-42e3-ac31-cfa0f3ee35e5 highest_usn : 0x0000000000002675 (9845) replica_flags : 0x00000071 (113) 1: DRSUAPI_DRS_ASYNC_OP 0: DRSUAPI_DRS_GETCHG_CHECK 0: DRSUAPI_DRS_UPDATE_NOTIFICATION 0: DRSUAPI_DRS_ADD_REF 0: DRSUAPI_DRS_SYNC_ALL 0: DRSUAPI_DRS_DEL_REF 1: DRSUAPI_DRS_WRIT_REP 1: DRSUAPI_DRS_INIT_SYNC 1: DRSUAPI_DRS_PER_SYNC 0: DRSUAPI_DRS_MAIL_REP 0: DRSUAPI_DRS_ASYNC_REP 0: DRSUAPI_DRS_IGNORE_ERROR 0: DRSUAPI_DRS_TWOWAY_SYNC 0: DRSUAPI_DRS_CRITICAL_ONLY 0: DRSUAPI_DRS_GET_ANC 0: DRSUAPI_DRS_GET_NC_SIZE 0: DRSUAPI_DRS_LOCAL_ONLY 0: DRSUAPI_DRS_NONGC_RO_REP 0: DRSUAPI_DRS_SYNC_BYNAME 0: DRSUAPI_DRS_REF_OK 0: DRSUAPI_DRS_FULL_SYNC_NOW 0: DRSUAPI_DRS_NO_SOURCE 0: DRSUAPI_DRS_FULL_SYNC_IN_PROGRESS 0: DRSUAPI_DRS_FULL_SYNC_PACKET 0: DRSUAPI_DRS_SYNC_REQUEUE 0: DRSUAPI_DRS_SYNC_URGENT 0: DRSUAPI_DRS_REF_GCSPN 0: DRSUAPI_DRS_NO_DISCARD 0: DRSUAPI_DRS_NEVER_SYNCED 0: DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING 0: DRSUAPI_DRS_INIT_SYNC_NOW 0: DRSUAPI_DRS_PREEMPTED 0: DRSUAPI_DRS_SYNC_FORCED 0: DRSUAPI_DRS_DISABLE_AUTO_SYNC 0: DRSUAPI_DRS_DISABLE_PERIODIC_SYNC 0: DRSUAPI_DRS_USE_COMPRESSION 0: DRSUAPI_DRS_NEVER_NOTIFY 0: DRSUAPI_DRS_SYNC_PAS 0: DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIP max_object_count : 0x000003e8 (1000) max_ndr_size : 0x00a00000 (10485760) extended_op : DRSUAPI_EXOP_NONE (0x0) fsmo_info : 0x0000000000000000 (0) partial_attribute_set : NULL partial_attribute_set_ex : NULL mapping_ctr: struct drsuapi_DsReplicaOIDMapping_Ctr num_mappings : 0x00000000 (0) mappings : NULL dump OK