Try this:
To determine who's writing an SMF rectype:
SL SET,IF,A=SYNCSVCD,L=(IGC0008C,64),DATA=(1R?+5,EQ,xx),
SD=(ALLNUC,ALLPSA,CSA,GRSQ,LPA,RGN,SQA,SUM,TRT),END
where xx = the SMF record type in hex
You should then be able to check SYSTRACE to see who issued the SVC 83
(x'svc53'). In the case in which it's a branch entry, you should be able
to follow the registers back to see who made the call.
Regards,
Ralph
Ralph Kaden
z/OS (MVS) Level 2 Support - Allocation and Scheduler
(Converter/Interpreter, Initiator/Terminator, ENF, SJF, SMF, SSI, SWA Mgr)
T/ L: 8/295-4096 External: 845-435-4096
VM: S390VM.v$i01029 MVS: PLPSC.v$i316
External email: [EMAIL PROTECTED]
Internal email: Ralph Kaden/Poughkeepsie/Contr/[EMAIL PROTECTED]
"Laine, Rogers" <[EMAIL PROTECTED]>
Sent by: IBM Mainframe Discussion List <[email protected]>
08/15/2008 08:40 AM
Please respond to
IBM Mainframe Discussion List <[email protected]>
To
[email protected]
cc
Subject
Re: SMF Subtype 132 record
Scott,
This is what I see when dumping this SMF record.
I see nothing that jumps out at me that would indicate who this belongs
to.
d k¬ "SYSBOPER004 \"
d k¬ "SYSBOPER007 A |
d "SYSBOPER007 A |
d "SYSBOPER004 \"
d "SYSBOPER004 \"
d "SYSBOPER007 A |
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Scott Barry
Sent: Thursday, August 14, 2008 10:25 PM
To: [email protected]
Subject: Re: SMF Subtype 132 record
On Thu, 14 Aug 2008 20:52:01 -0500, Rogers Laine <[EMAIL PROTECTED]>
wrote:
>We are trying to research what software is producing SMF subtype of 132?
>We see these records being created every 1-2 minutes when a TSO user is
>log on the system.
>Any ideas?
>
Dump a few of these records and look for an eye-catcher in the header,
presuming you are looking for SMF "type" 132. You can use some DFSORT /
COPY and IDCAMS PRINT utility commands - example JCL below:
//S1 EXEC PGM=SORT,PARM=ABEND
//SYSOUT DD SYSOUT=*
//SORTIN DD DISP=SHR,DSN=_your_smf_input_file_
//SORTOUT DD DSN=&&SORTTEMP,
// UNIT=SYSDA,SPACE=(CYL,(10,10)),
// DISP=(NEW,PASS)
//SYSIN DD *
OPTION STOPAFT=5
SORT FIELDS=COPY
INCLUDE COND=(6,1,BI,EQ,132)
/*
//DUMP EXEC PGM=IDCAMS
//IN1 DD DISP=(OLD,DELETE),DSN=&&SORTTEMP
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
PRINT INFILE(IN1) DUMP
/*
Scott Barry
SBBWorks, Inc.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
________________________________________________________________
Confidentiality Notice:
This E-Mail transmission (and/or the documents accompanying it)
may contain information belonging to the sender which is
confidential, privileged and/or exempt from disclosure under
applicable law. The information is intended only for the use
of the individual(s) or entity named above. If you are not
the intended recipient, you are hereby notified that any
disclosure, copying, distribution or the taking of any action
in reliance on the contents of this information is strictly
prohibited. If you have received this E-Mail transmission
in error, please immediately notify us by return E-Mail or
telephone to arrange for return of its contents including any
documents.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
