[Samba] Interpreting Samba Logs

[Javier Barroso]

Hi,
On Fri, Dec 5, 2008 at 4:49 PM, Calderon, Willy (NIH/NINDS) [C]
<calderow at ninds.nih.gov> wrote:
> I am attempting to read the log files for a particular machine that is
> accessing our server. The smb.conf global property has set up the log
> level = 2 and each machine has a file which illustrates what they are
> accessing. The following is a snippet of the log and I wanted to know if
> anyone could 100% verify whether the user is COPYING the data to a local
> drive. As you can see, the users has opened/closed a directory and files
> within a couple of seconds. There are thousands of lines like this and I
> want to be sure what this means.
>
>
>
> <snippet>
>
>
>
>
>
>  johnsonc opened file johnsonc/My Documents/Articles, SL, Ha/Diaz NP
> rojo/ongoing ischemia in setting of amyloid CK.doc read=Yes write=No
> (numopen=11)
Could be user is simply open a directory and explorer is reading
details from files ?

Regards