I am parsing the SMF119 subtype 192 (Co:Z SFTP server log messages) records based on the description in the manual.
I'd like a better understanding about the format of the variable length EBCDIC 'message text' field. This is the field found in the 'Co:Z SFTP messages' section of the SMF record where the triplet offset address is decimal 44 which takes me to the section and the 'message text' field is at decimal offset 10 within that section.
Below is an the front part of the 'message text' field I am interested in. What are the 10 bytes between the mode=binary and the PosixFile statement? Is there documentation that explains the record layout of the message text? Is this meaningful information? Any insight would be great. With respect, -Jadon
ZosSettings: Transfer options: mode=binary ..Ø...± ÍPosixFile:
A discussion of Co:Z sftp, a port of OpenSSH sftp for z/OS
2 posts • Page 1 of 1
See https://dovetail.com/docs/sftp/smf-supp ... smfrecs192
The third triplet points to one or more individual messages. Each message has a 10 byte header as defined above. The Time and Date fields are in standard SMF format.Co:Z SFTP messages
This section contains Co:Z SFTP messages, informational level or above, that were associated with the previous transfer. One or more message sub-sections may be included, each with the following layout:
Offset Length Format Description
0 4 binary Time (in local time)
4 4 Packed Date (in local time)
8 2 binary Length of message that follows
10 variable EBCDIC Message text