Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Identify who, from where, sign on CICS with an incorrect pw

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS
View previous topic :: :: View next topic  
Author Message
Weilin Wen

New User


Joined: 09 May 2019
Posts: 1
Location: China

PostPosted: Thu May 09, 2019 1:23 pm    Post subject: Identify who, from where, sign on CICS with an incorrect pw
Reply with quote

A user got his ID revoked repeatedly, and from SMF log, I find the terminal ID NVCP1590. How can I interpret the terminal ID? Hopefully, the terminal ID can lead me to an IP address.
Back to top
View user's profile Send private message

vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1627
Location: Oregon

PostPosted: Fri May 10, 2019 10:14 pm    Post subject:
Reply with quote

You could trace the terminal ID to its corresponding IP address using SMF Type 119.

SMF 119 - subtype 2 records connection TCP connection terminal records.

You might need MXG to process SMF type 119 records.
If you have MXG, then

Create a PDB with Type 119 records.
Look at TYP11902 dataset in the PDB.
TTTELUNA has the TERMINAL ID(LU name)
TTRIP has the IP address of the terminal.
You can cross verify your finding, by making sure the password was revoked at the same as the SMF time on Type 119 records.

WHERE TTTELUNA = 'NVCP1590';

Hope this helps.

Vasanth.S
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts CICS Web client request Uday Kumar R CICS 0 Fri May 17, 2019 9:13 pm
No new posts Need suggestion on CICS READ UPDATE subratarec CICS 8 Fri May 03, 2019 2:23 pm
No new posts logically splitting a CICS region - help jzhardy CICS 3 Tue Mar 26, 2019 4:52 am
No new posts Suggestion on KSDS VSAM READ in CICS subratarec CICS 5 Wed Feb 13, 2019 4:42 pm
No new posts Convert CICS Modules to AMODE ANY CICSWOLF PL/I & Assembler 6 Fri Feb 08, 2019 7:10 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us