[Samba] extrapolate log in/out time from logs

[Greg]

Hello,

    I'd like to generate some reports on users log in and log out 
times,  is there a way to do this with/without using smbd log files?  



I was looking at the log files and it looks like I can determine  the 
time of login by looking for :


 [2006/02/10 09:31:46, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
  Got user=[jsmith] domain=[CORP] workstation=[DHCP31247] len1=24 len2=24

   there is log activity later on in the day,  around 5PM which I'm sure 
is the client updating the profile as they log off.    Is it safe to 
assume when I see the lines marked  "*A*",  any subsequent lines after 
that are related to the client logging off and updating the profile?  My 
understanding is the profile server should only be contacted from a 
client when it is reading its profile (login) and writing out the 
profile during log off,  is this correct?


. *A* [2006/02/13 09:50:10, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
. *A*  Got user=[jsmith] domain=[CORP] workstation=[DHCP31247] len1=24 
len2=24
. [2006/02/13 17:18:54, 3] smbd/oplock.c:init_oplocks(1302)
.   open_oplock_ipc: opening loopback UDP socket.
. [2006/02/13 17:18:54, 3] 
smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
.   Linux kernel oplocks enabled
. [2006/02/13 17:18:54, 3] smbd/oplock.c:init_oplocks(1333)
.   open_oplock ipc: pid = 17375, global_oplock_port = 35230
. [2006/02/13 17:18:54, 3] smbd/process.c:process_smb(1092)
.   Transaction 0 of length 137


thanks for your time,

greg