Go to Home Page
Questions?
Call 1-800-572-5517
 
  Go to Home Page  
  See all products
  See price schedules
  See manuals, tutorials, articles
  Download a free 30-day trial
  See user testimonials
  About Pacific Systems Group
 
 
SMF Tools
  See SMF Record Layouts
  See Sample SMF Reports
  Learn How to Export SMF Data
  Download Free SMF Reporting Software (30 days)
 
One of the greatest SMF record parsing programming languages I've ever seen. Chief, Large Systems Services Branch, NIH
  Choose Spectrum Writer to add 4GL to your product
  Free 60-Page Book (PDF) - How to Make an SMF Report
Spectrum DCOLLECT Reporter - the 4GL DCOLLECT Report Writer.

Spectrum SMF Writer - the 4GL SMF Report Writer.

SMF Type 119 Record - Subtype 70

This table shows the record layout for type 119 SMF records
(FTP Server Transfer Completion Record).

List of other SMF record layouts available.
List of sample SMF reports.

Purpose: Transmission Control Protocol/Internet Protocol (TCP/IP) writes type 119 records to collect statistics about Telnet servers and clients, FTP servers and clients, and API activity and stack usage information.

The Subtype 70 FTP server transfer completion record is collected when the z/OS FTP server completes processing of one of the following FTP file transfer operations: file appending, file deletion, file storage (includes both store and store unique operations), file retrieval, or file renaming. A common format for the record is used for each FTP file transfer operation, so the record contains an indication of which operation was performed. The record also contains optional sections provided when gethostbyaddr( ) processing was performed during the file transfer operation, as well as when the file names involved in the transfer operation were MVS™ or z/OS® UNIX® filenames.

The Type 119 FTP server transfer completion record is collected at the same point in file transfer processing as the equivalent Type 118 FTP server SMF records. The Type 118 records used different record subtypes, as opposed to a field within the SMF record information, to represent the different file transfer operations being recorded.

It's easy to report on SMF 119 data! (Jump to sample reports)

SMF Spectrum Writer
We have a low-cost 4GL report writer especially for SMF files. It's called Spectrum SMF Writer.

Spectrum SMF Writer handles the difficult SMF record parsing for you automatically. You just specify which fields you want to see.

Spectrum SMF Writer also converts the arcane date and time fields and reformats them into an attractive report.

Plus, Spectrum SMF Writer can export SMF data as comma delimited files to use on your PC.
 
Try It FREE Now!

SMF Type 119 Record -- FTP Server Transfer Completion Record
Offset
(Dec.)
Offset
(Hex)
NameLengthFormatDescription
00SMF119LEN2binary
Record length. This field and the next field (total of four bytes) form the RDW (record descriptor word). See “Standard SMF Record Header” on page 13-1 for a detailed description.
22SMF119SEG2binary
Segment descriptor (see record length field).
44SMF119FLG1binary
System indicator Bit Meaning When Set 0 New record format 1 Subtypes used 2 Reserved. 3-6 Version indicators* 7 System is running in PR/SM mode.*See “Standard SMF Record Header” on page 13-1 for a detailed description.
55SMF119RTY1binary
Record type 119 (X'77').
66SMF119TME4binary
Time since midnight, in hundredths of a second, that the record was moved into the SMF buffer.
10ASMF119DTE4packed
Date when the record was moved into the SMF buffer, in the form 0cyydddF. See “Standard SMF Record Header” on page 13-1 for a detailed description.
14ESMF119SID4EBCDIC
System identification (from the SMFPRMxx SID parameter).
1812SMF119SSI4EBCDIC
Subsystem identification.
2216SMF119STY2binary
Record subtype.
Self Defining Section
2418SMF119TRN2binary
Number of triplets in this record. A triplet is a set of three SMF fields (offset/length/number values) that defines a section of the record. The offset is the offset from the RDW.
261A--2binary
Reserved.
281CSMF119IDOff4binary
Offset to TCP/IP identification section from RDW.
3220SMF119IDLen2binary
Length of TCP/IP identification section.
3422SMF119IDNum2binary
Number of TCP/IP identification sections.
3624SMF119S1Off4Binary
Offset to first data section
4028SMF119S1Len2Binary
Length of first data section
422ASMF119S1Num2Binary
Number of first data sections
442CSMF119S2Off4Binary
Offset to 2nd data section
4830SMF119S2Len2Binary
Length of 2nd data section
5032SMF119S2Num2Binary
Number of 2nd data sections
5234SMF119S3Off4Binary
Offset to 3rd data section
5638SMF119S3Len2Binary
Length of 3rd data section
583ASMF119S3Num2Binary
Number of 3rd data sections
603CSMF119S4Off4Binary
Offset to 4th data section
6440SMF119S4Len2Binary
Length of 4th data section
6642SMF119S4Num2Binary
Number of 4th data sections
6844SMF119S5Off4Binary
Offset to 5th data section
7248SMF119S5Len2Binary
Length of 5th data section
744ASMF119S5Num2Binary
Number of 5th data sections
TCP/IP Identification Section

For the FTP server transfer completion record, the TCP/IP stack identification section indicates FTPS as the subcomponent and X'08' (event record) as the record reason.

(Offset from beginning of record: SMF119IDOff)
00SMF119TI_
SYSName
8EBCDIC
System name from SYSNAME in IEASYSxx
88SMF119TI_
SysplexName
8EBCDIC
Sysplex name from SYSPLEX in COUPLExx
1610SMF119TI_
Stack
8EBCDIC
TCP/IP stack name
2418SMF119TI_
ReleaseID
8EBCDIC
z/OS Communications Server TCP/IP release identifier
3220SMF119TI_
Comp
8EBCDIC
TCP/IP subcomponent (right padded with blanks):
FTPC FTP Client
FTPS FTP server
IP IP layer
STACK Entire TCP/IP stack
TCP TCP layer
TN3270C TN3270 Client
TN3270S TN3270 server
UDP UDP layer
4028SMF119TI_
ASName
8EBCDIC
Started task qualifier or address space name of address space that writes this SMF record
4830SMF119TI_
UserID
8EBCDIC
User ID of security context under which this SMF record is written
5638--2EBCDIC
Reserved
583ASMF119TI_
ASID
2Binary
ASID of address space that writes this SMF record
603CSMF119TI_
Reason
1Binary
Reason for writing this SMF record:
X'08' Event record
X'C0' Interval statistics record, more records follow
X'80' Interval statistics record, last record in set
X'60' End-of-statistics record, more records follow
X'20' End-of-statistics record, last record in set
X'50' Shutdown starts record, more records follow
X'10' Shutdown starts record, last record in set
613D--3EBCDIC
Reserved
Subtype 70 - FTP server transfer completion specific section of this SMF record.
(Offset from beginning of record: SMF119S1Off)
00SMF119FT_
FSOper
1Binary
FTP Operation according to SMF77 subtype classification:
x'01': Append
x'02': Delete
x'03': Rename
x'04': Retrieve
x'05': Store
x'06': Store Unique
11--3Binary
Reserved
44SMF119FT_
FSCmd
4EBCDIC
FTP command (according to RFC 959+)
88SMF119FT_
FSFType
4EBCDIC
File type (SEQ, JES, or SQL)
12CSMF119FT_
FSDRIP
16Binary
Remote IP address (data connection)
281CSMF119FT_
FSDLIP
16Binary
Local IP address (data connection)
442CSMF119FT_
FSDRPort
2Binary
Remote port number (data connection - client)
462ESMF119FT_
FSDLPort
2Binary
Local port number (data connection - server)
4830SMF119FT_
FSCRIP
16Binary
Remote IP address (control connection)
6440SMF119FT_
FSCLIP
16Binary
Local IP address (control connection)
8050SMF119FT_
FSCRPort
2Binary
Remote port number (control connection - client)
8252SMF119FT_
FSCLPort
2Binary
Local port number (control connection - server)
8454SMF119FT_
FSSUser
8EBCDIC
Client User ID on server
925CSMF119FT_
FSType
1EBCDIC
Data type:
A: ASCII
E: EBCDIC
I: Image
B: Double-byte
U: UCS-2
935DSMF119FT_
FSMode
1EBCDIC
Transmission mode
B: Block
C: Compressed
S: Stream
945ESMF119FT_
FSStruct
1EBCDIC
Data structure
F: File
R: Record
955FSMF119FT_
FSDsType
1EBCDIC
Data set type
S: SEQ
P: PDS
H: HFS
9660SMF119FT_
FSSTime
4Binary
Transmission start time of day
10064SMF119FT_
FSSDate
4Packed
Transmission start date
10468SMF119FT_
FSETime
4Binary
Transmission end time of day
1086CSMF119FT_
FSEDate
4Packed
Transmission end date
11270SMF119FT_
FSDur
4Binary
File transmission duration in units of 1/100 seconds
11674SMF119FT_
FSBytes
8Binary
Transmission byte count; 64-bit integer
1247CSMF119FT_
FSLReply
4EBCDIC
Last reply to client (3-digit RFC 959 code, right justified)
12880SMF119FT_
FSM1
8EBCDIC
PDS Member name
13688SMF119FT_
FSRS
8EBCDIC
Reserved for abnormal end information
14490SMF119FT_
FSM2
8EBCDIC
Second PDS member name (if rename operation)
15298SMF119FT_
FSBytesFloat
8Floating
point hex z/OS floating point format for transmission byte count
160A0SMF119FT_
FSCConnID
4Binary
TCP connection ID of FTP control connection
164A4SMF119FT_
FSDConnID
4Binary
TCP connection ID of FTP data connection, or 0
168A8SMF119FT_
FSSessionID
15EBCDIC
FTP activity logging session ID. The activity logging session ID uniquely identifies the FTP session between a client and a server. The identifier is created by combining the job name of the FTP daemon with a 5-digit number in the range 00000 - 99 999.
183B7--1Binary
Reserved
Subtype 70 - FTP server transfer completion host name section. This section is optional, and is present if gethostbyaddr operation was performed for the local IP address
(Offset from beginning of record: SMF119S2Off)
00SMF119FT_
FSHostname
VARIABLEEBCDIC
Host Name
Subtype 70 - FTP server transfer completion first associated data set name section. This section represents the server MVS or z/OS UNIX data set name associated with a rename or file transfer. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of filename represented here.
(Offset from beginning of record: SMF119S3Off)
00SMF119FT_
FSFileName1
VARIABLEEBCDIC
Server MVS or z/OS UNIX file name associated with the file transfer or rename operation. When the operation is a rename, this is the file or data set original name.
Subtype 70 - FTP server transfer completion second associated data set name section. This section represents an MVS or z/OS UNIX data set name associated with the rename operation. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of file name represented here.
(Offset from beginning of record: SMF119S4Off)
00SMF119FT_
FSFileName2
VARIABLEEBCDIC
Second MVS or z/OS UNIX file name associated with a rename. This is the new file or data set name.
Subtype 70 - FTP server security section
(Offset from beginning of record: SMF119S5Off)
00SMF119FT_
FSMechanism
1EBCDIC
Protection Mechanism
N None
T TLS
G GSSAPI
A AT-TLS
11SMF119FT_
FSCProtect
1EBCDIC
Control connection protection level
N None
C Clear
S Safe
P Private
22SMF119FT_
FSDProtect
1EBCDIC
Data connection Protection Level
N None
C Clear
S Safe
P Private
33SMF119FT_
FSLoginMech
1EBCDIC
Login Method
P Password
C Certificate
T Kerberos ticket
44SMF119FT_
FSProtoLevel
8EBCDIC
Protocol level (only present if Protocol Mechanism is TLS or AT-TLS) Possible values are:
* SSLV2
* SSLV3
* TLSV1
12CSMF119FT_
FSCipherSpec
20EBCDIC
Cipher Specification (only present if Protocol Mechanism is TLS or AT-TLS). Possible values when Protocol Level is SSLV2:
* RC4 US
* RC4 Export
* RC2 US
* RC2 Export
* DES 56-Bit
* Triple DES US
Possible values when Protocol Level is SSLV3 or TLSV1:
* SSL_NULL_MD5
* SSL_NULL_SHA
* SSL_RC4_MD5_EX
* SSL_RC4_MD5
* SSL_RC4_SHA
* SSL_RC2_MD5_EX
* SSL_DES_SHA
* SSL_3DES_SHA
* SSL_AES_128_SHA
* SSL_AES_256_SHA
3220SMF119FT_
FSProtoBufSize
4Binary
Negotiated protection buffer size
3624SMF119FT_
FSCipher
2EBCDIC
Hexadecimal value of cipher specification (present only when Protocol Mechanism is TLS or AT-TLS).

The table above is based on the description provided by IBM in its "MVS Systems Management Facilities (SMF)" manual.

Sample Report from SMF 119 Subtype 2 Records
Showing Information about TCP Connections


The sample SMF report below was created with Spectrum SMF Writer, the low-cost 4GL SMF report writer.

In this report, we read as input the SMF file and select just the type 119 subtype 2 TCP Connection Termination records. (See SMF 119 Subtype 2 record layout.) The report shows information about terminated TCP connections, including start time, end time and computed elapsed time. It also shows the total number of bytes sent and received during the connection and the termination code. Our record layout also expands the 1-byte termination code into a readable descriptive text. The report is grouped by TCP/IP Stack and Resource. The report includes subtotals for each Resource.

All of this with just a few lines of code!
Why not install a Spectrum SMF Writer trial right now and start making your own SMF reports!

These Spectrum SMF Writer Statements:


INPUT:  SMF119 LIST(YES)

INCLUDEIF: SMF119RTY=119 AND SMF119STY=2

COMPUTE: MY_DURATION(2) = #MAKETIME(
               ((#MAKENUM(SMF119AP_TTEDATE) * 86400)
                  + #MAKENUM(SMF119AP_TTETIME))
             - ((#MAKENUM(SMF119AP_TTSDATE) * 86400)
                  + #MAKENUM(SMF119AP_TTSTIME))
                                   )

TITLE: 'Z/OS TCP DAILY CONNECTIONS REPORT'
TITLE: 'SYSTEM:' SMF119TI_SYSNAME
       'SYSPLEX:' SMF119TI_SYSPLEXNAME
       'STACK:' SMF119TI_STACK
TITLE: 'SORTED BY STACK AND RESOURCE NAME'

COLUMNS: SMF119AP_TTRNAME('RESOURCE')
         SMF119AP_TTSDATE('DATE/STARTED')
         SMF119AP_TTSTIME('TIME/STARTED')
         SMF119AP_TTEDATE('DATE/ENDED')
         SMF119AP_TTETIME('TIME/ENDED')
         MY_DURATION('CONNECTION/DURATION/HH:MM:SS.SS' ACCUM
                     TP'ZZ:ZZ:Z9.99')
         SMF119AP_TTINBYTES('INBOUND/BYTES')
         SMF119AP_TTOUTBYTES('OUTBOUND/BYTES')
         SMF119AP_TTTERMCODE(HEX 'TERM/CODE')
         SMF119AP_TTTERMCODE_DESC('TERM CODE DESC')

SORT:    SMF119TI_STACK
         SMF119AP_TTRNAME
         SMF119AP_TTSDATE
         SMF119AP_TTSTIME

BREAK:   SMF119AP_TTRNAME

 

Produce This SMF Report:


                                              Z/OS TCP DAILY CONNECTIONS REPORT
                                    SYSTEM: ST1      SYSPLEX: SYPROD    STACK: S01QDAS
                                             SORTED BY STACK AND RESOURCE NAME

                                                    CONNECTION
            DATE      TIME       DATE      TIME      DURATION      INBOUND        OUTBOUND    TERM
 RESOURCE STARTED    STARTED    ENDED      ENDED    HH:MM:SS.SS     BYTES          BYTES      CODE     TERM CODE DESC
 ________ ________ ___________ ________ ___________ ___________ ______________ ______________ ____ _______________________

 FTPTA5   03/21/09 14:04:06.81 03/21/09 14:04:07.46        0.65        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 14:05:35.59 03/21/09 14:05:45.67       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA5   03/21/09 14:12:13.81 03/21/09 14:12:14.51        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 14:12:27.35 03/21/09 14:12:37.42       10.07         27,043            329  52  APPL ISSUED CLOSE
 FTPTA5   03/21/09 15:30:34.96 03/21/09 15:30:35.64        0.68        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 15:35:13.92 03/21/09 15:35:24.00       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA5   (    6 ITEMS)                     32.26        853,740         10,143
 
 FTPTA6   03/21/09 14:05:38.03 03/21/09 14:05:38.70        0.67        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 14:07:23.60 03/21/09 14:07:33.68       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA6   03/21/09 14:12:29.83 03/21/09 14:12:30.50        0.67        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 14:17:10.02 03/21/09 14:17:20.16       10.14         27,043            329  52  APPL ISSUED CLOSE
 FTPTA6   03/21/09 15:35:16.45 03/21/09 15:35:17.21        0.76        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 15:36:15.10 03/21/09 15:36:25.18       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA6   (    6 ITEMS)                     32.40        853,740         10,143
 
 FTPTA7   03/21/09 14:07:26.16 03/21/09 14:07:26.86        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 14:08:24.36 03/21/09 14:08:34.50       10.14             70            507  52  APPL ISSUED CLOSE
 FTPTA7   03/21/09 14:17:12.60 03/21/09 14:17:13.31        0.71        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 14:21:40.01 03/21/09 14:21:50.08       10.07         27,043            329  52  APPL ISSUED CLOSE
 FTPTA7   03/21/09 15:36:17.53 03/21/09 15:36:18.17        0.64        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 15:37:11.45 03/21/09 15:37:21.53       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA7   (    6 ITEMS)                     32.34        826,767         10,321
 
 FTPTA8   03/21/09 08:09:32.96 03/21/09 15:29:02.41  7:19:29.45        274,763         15,912  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 13:17:39.42 03/21/09 14:42:50.82  1:25:11.40         47,498          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:42:57.42 03/21/09 14:43:21.38       23.96         45,921          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:43:26.45 03/21/09 15:28:27.01    45:00.56         47,498          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:50:01.00 03/21/09 15:28:26.10    38:25.10         35,513          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:51:01.03 03/21/09 14:52:28.82     1:27.79         33,273            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:53:05.50 03/21/09 15:28:22.53    35:17.03         33,273            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:53:51.74 03/21/09 14:55:51.42     1:59.68         35,306          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:56:05.98 03/21/09 15:11:31.19    15:25.21         33,066            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:12:01.80 03/21/09 15:13:30.66     1:28.86         35,266          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:13:45.48 03/21/09 15:17:09.41     3:23.93         38,223          2,199  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:18:54.59 03/21/09 15:20:07.26     1:12.67         34,273          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:20:22.01 03/21/09 15:28:20.73     7:58.72         33,118            875  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA8   (   13 ITEMS)               11:16:44.36        726,991         34,632

 
 FTPTA9   03/21/09 14:09:28.52 03/21/09 14:09:29.22        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA9   03/21/09 14:10:24.02 03/21/09 14:10:34.10       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA9   03/21/09 15:01:06.82 03/21/09 15:01:07.46        0.64        257,537          3,052  61  CLIENT SENT RESET
 FTPTA9   03/21/09 15:13:52.13 03/21/09 15:14:02.53       10.40         27,043            329  52  APPL ISSUED CLOSE

 ...

See other sample SMF reports.

Copyright 2017.
Pacific Systems Group.
All rights reserved.


Spectrum Writer 4GL - the economical alternative to SAS, Easytrieve, DYL-280...

Home | Products | Prices | Documentation | 30-Day Trials | Customer Reviews | Company | FAQ | Sample Reports | SMF Records
Send Your Comments or Questions