SMF119 subtype 192 question

A discussion of Co:Z sftp, a port of OpenSSH sftp for z/OS
Post Reply
Jadon
Posts: 3
Joined: Fri Sep 11, 2015 6:46 pm

SMF119 subtype 192 question

Post by Jadon » Fri May 19, 2017 6:40 pm

I am parsing the SMF119 subtype 192 (Co:Z SFTP server log messages) records based on the description in the manual.

I'd like a better understanding about the format of the variable length EBCDIC 'message text' field. This is the field found in the 'Co:Z SFTP messages' section of the SMF record where the triplet offset address is decimal 44 which takes me to the section and the 'message text' field is at decimal offset 10 within that section.

Below is an the front part of the 'message text' field I am interested in. What are the 10 bytes between the mode=binary and the PosixFile statement? Is there documentation that explains the record layout of the message text? Is this meaningful information? Any insight would be great. With respect, -Jadon

ZosSettings: Transfer options: mode=binary ..Ø...± ÍPosixFile:
E9AE8AA898AACB74E989A889499A899A749988788989A4128011847D9A8AC898ACB74
96225339572D9DA03915265906739652A04645E2951980CA0173F05762976935D9DA0

dovetail
Site Admin
Posts: 1776
Joined: Thu Jul 29, 2004 12:12 pm

Re: SMF119 subtype 192 question

Post by dovetail » Mon May 22, 2017 12:29 pm

See https://dovetail.com/docs/sftp/smf-supp ... smfrecs192
Co:Z SFTP messages

This section contains Co:Z SFTP messages, informational level or above, that were associated with the previous transfer. One or more message sub-sections may be included, each with the following layout:

Offset Length Format Description
0 4 binary Time (in local time)
4 4 Packed Date (in local time)
8 2 binary Length of message that follows
10 variable EBCDIC Message text
The third triplet points to one or more individual messages. Each message has a 10 byte header as defined above. The Time and Date fields are in standard SMF format.

Post Reply