SMF Type 92 Subtype 11 (UNIX file close)

[Martin, Mike]

We are getting a BUNCH of SMF Type 92 Subtype 11's. It appears that
TCPIP is involved, but I can't figure out what the path name is. If I
browse the SMF file, the data in the field looks like gobbly-gook.
(machine readable) The SMF manual says it is a 8 byte binary field that
can have a pathname that might be as many as 64 characters. HUH?! OK,
I looked in IBMLink and found the following:
The SMF manual ('MVS System Management Facilities (SMF)', doc #
GC28-1783-04), in the section on Type 92 (OpenMVS File System Activity),
for record Subtype 11, there appears to be a 64 byte field on the end
called SMF92CPN, having something to do with 'Pathname': .
SMF92CBW DS 1BL8 Bytes written
SMF92CPN DS 1CL0064 Pathname

BUT, it still looks like goobly-gook.... ASCII?
+F S +F W H - &- x
B4C1E2B8B4C1EBC0060005640A2900000000000000000000000
BE6B27D0BE6B638070000000077C000C0001000500000000000

What am I looking at?

Thanks in advance!
Mike Martin


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to ***@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

[Ray Mullins]

Hi Mike,

1) You may be looking at the wrong area. The descriptions of the
subtype sections are 0-based offsets from the area pointed by the
corresponding triplet. So to find SMF92CPN, it's X'44' added to the
value of SMF92DOF (x'2C' into the record), the offset of the data
section in the SMF record. For example, if SMF92DOF is X'00000144',
then SMF92CPN is X'144' + X'44' = X'188' into the record.

2) It looks like you did find a doc error - that should be a 64 byte
field. It's still not correct in the z/OS 1.5 SMF book; fire off an
e-mail to the doc update pub. (I've noticed that the TCP/IP and
WebSphere products seem to have issues with documenting SMF records.)
When working with SMF records, the triplets are the key to parsing the
data in the record.

HTH!

Kind regards,
Ray

--
M. Ray Mullins - Software Developer
CIMS Lab, Inc.
Roseville, CA, USA

-----Original Message-----
From: IBM Mainframe Discussion List
Sent: Wednesday 02 June 2004 13:57
Subject: SMF Type 92 Subtype 11 (UNIX file close)
We are getting a BUNCH of SMF Type 92 Subtype 11's. It
appears that TCPIP is involved, but I can't figure out what
the path name is. If I browse the SMF file, the data in the
field looks like gobbly-gook.
(machine readable) The SMF manual says it is a 8 byte binary
field that can have a pathname that might be as many as 64
The SMF manual ('MVS System Management Facilities (SMF)', doc
# GC28-1783-04), in the section on Type 92 (OpenMVS File
System Activity), for record Subtype 11, there appears to be
a 64 byte field on the end called SMF92CPN, having something
to do with 'Pathname': .
SMF92CBW DS 1BL8 Bytes written
SMF92CPN DS 1CL0064 Pathname
BUT, it still looks like goobly-gook.... ASCII?
+F S +F W H - &- x
B4C1E2B8B4C1EBC0060005640A2900000000000000000000000
BE6B27D0BE6B638070000000077C000C0001000500000000000
What am I looking at?
Thanks in advance!
Mike Martin
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access
message: GET IBM-MAIN INFO Search the archives at
http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to ***@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

[Martin, Mike]

M. Ray Mullins said:

"... You may be looking at the wrong area. The descriptions of the
subtype sections are 0-based offsets from the area pointed by the
corresponding triplet. So to find SMF92CPN, it's X'44' added to the
value of SMF92DOF (x'2C' into the record), the offset of the data
section in the SMF record. For example, if SMF92DOF is X'00000144',
then SMF92CPN is X'144' + X'44' = X'188' into the record."

Ray,
I believe you are correct. I was looking at the wrong area. Based on
the calculations you gave me, it puts me right at the very end of the
record. I guess that falls into the "This field is not always present"
category!
Thank you for your help!!!
Mike






<FONT SIZE=1 FACE="ARIAL">^^^^^^^^^^^^^
This email may contain confidential and privileged material for the sole use of the intended recipient. If you are not the intended recipient, please contact the sender and delete all copies. Any review or distribution by others is strictly prohibited. Personal emails are restricted by policy of the State Employees' Credit Union (SECU). Therefore SECU specifically disclaims any responsibility or liability for any personal information or opinions of the author expressed in this email.


</FONT>


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to ***@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html