Portal | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Forum Index
 
Register
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Identify who, from where, sign on CICS with an incorrect pw

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS
View previous topic :: :: View next topic  
Author Message
Weilin Wen

New User


Joined: 09 May 2019
Posts: 1
Location: China

PostPosted: Thu May 09, 2019 1:23 pm    Post subject: Identify who, from where, sign on CICS with an incorrect pw
Reply with quote

A user got his ID revoked repeatedly, and from SMF log, I find the terminal ID NVCP1590. How can I interpret the terminal ID? Hopefully, the terminal ID can lead me to an IP address.
Back to top
View user's profile Send private message

vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1691
Location: Tiruppur, India

PostPosted: Fri May 10, 2019 10:14 pm    Post subject:
Reply with quote

You could trace the terminal ID to its corresponding IP address using SMF Type 119.

SMF 119 - subtype 2 records connection TCP connection terminal records.

You might need MXG to process SMF type 119 records.
If you have MXG, then

Create a PDB with Type 119 records.
Look at TYP11902 dataset in the PDB.
TTTELUNA has the TERMINAL ID(LU name)
TTRIP has the IP address of the terminal.
You can cross verify your finding, by making sure the password was revoked at the same as the SMF time on Type 119 records.

WHERE TTTELUNA = 'NVCP1590';

Hope this helps.

Vasanth.S
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
This topic is locked: you cannot edit posts or make replies. Missing Negative sign in COBOL jzhardy COBOL Programming 6 Sat Sep 26, 2020 11:32 am
No new posts parmeter existence bit for URIMAP in ... ashokkumar.selvaraj CICS 2 Mon Sep 07, 2020 2:14 pm
No new posts How to use CICS command CEBR on sdsf ... wang_f_y1 CICS 1 Fri Aug 28, 2020 10:35 pm
No new posts Identify the count from two diffrent ... UmashankarSubramani DFSORT/ICETOOL 19 Sat Jul 11, 2020 4:35 am
No new posts CICS file processing using applicatio... Satish_gsv CICS 3 Sat Jul 11, 2020 4:18 am

Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us