Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Forum Index
 
Register
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Identify who, from where, sign on CICS with an incorrect pw

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS
View previous topic :: :: View next topic  
Author Message
Weilin Wen

New User


Joined: 09 May 2019
Posts: 1
Location: China

PostPosted: Thu May 09, 2019 1:23 pm    Post subject: Identify who, from where, sign on CICS with an incorrect pw
Reply with quote

A user got his ID revoked repeatedly, and from SMF log, I find the terminal ID NVCP1590. How can I interpret the terminal ID? Hopefully, the terminal ID can lead me to an IP address.
Back to top
View user's profile Send private message

vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1657
Location: Tirupur

PostPosted: Fri May 10, 2019 10:14 pm    Post subject:
Reply with quote

You could trace the terminal ID to its corresponding IP address using SMF Type 119.

SMF 119 - subtype 2 records connection TCP connection terminal records.

You might need MXG to process SMF type 119 records.
If you have MXG, then

Create a PDB with Type 119 records.
Look at TYP11902 dataset in the PDB.
TTTELUNA has the TERMINAL ID(LU name)
TTRIP has the IP address of the terminal.
You can cross verify your finding, by making sure the password was revoked at the same as the SMF time on Type 119 records.

WHERE TTTELUNA = 'NVCP1590';

Hope this helps.

Vasanth.S
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Cics storage violation Venkata Ramayya CICS 10 Thu Nov 07, 2019 12:45 am
No new posts CICS Web Services configuration question SickPup404 CICS 6 Mon Nov 04, 2019 9:56 pm
This topic is locked: you cannot edit posts or make replies. ASSIST/GT with CICS BPranav CICS 1 Mon Sep 16, 2019 9:26 pm
This topic is locked: you cannot edit posts or make replies. COBOL/CICS with real time MQ Series u... BPranav CICS 2 Mon Sep 16, 2019 9:19 pm
No new posts Can rexx be exected in cics(online) e... RAVISANKAR07 All Other Mainframe Topics 3 Wed Sep 04, 2019 5:51 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us