Don't have HL Assembler here. Anyway I think I would make my mods to DMSPOP (PROP Mainline) or DMSPOA (Action routine that does the logging). The messages themselves are absolutly useless. They give a GRAF address that is different each time it is DIALED, the IP address that the terminal came from is meaningless, I already know what server is making the connections.
If anyone wants to track these guys, let CICS do it, that is where they are all going to anyway.
On further analysis it looks like DMSPOA uses standard CMS I/O ie. FSWRITE .. I think a little SVC 202 trap might be the easiest and safest, and most flexiable way around this.
-----Original Message-----
From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU]On
Behalf Of Mike Walter
Sent: Friday, November 03, 2006 5:03 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Any way to stop PROP from logging 'select messages'?
Well... you *do* have the source code for HCPDIA ASSEMBLE. If you have
the HL Assembler, then you have the tools to remedy your perceived problem
on your own.
Before you do stop logging the messages, ask yourself: Does your External
Security Manager log the DIAL and DROP commands? Would an auditor want to
know who did what and when?
You don't need to reply with those answers, as we don't need to know. You
just might want to ask your management if 20-30,000 more messages per day
might just provide cheap forensic evidence needed to resolve a future
security problem or, a security audit.
Mike Walter
Hewitt Associates
"Huegel, Thomas" <[EMAIL PROTECTED]>
Sent by: "The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU>
11/03/2006 02:43 PM
Please respond to
"The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU>
To
IBMVM@LISTSERV.UARK.EDU
cc
Subject
Re: Any way to stop PROP from logging 'select messages'?
Alan,
Does that stop PROP from writting to the log file?
My problem is that I have an application that does 10-15K DIAL/DROP a day.
That really is a waste.
Tom
-----Original Message-----
From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU]On
Behalf Of Alan Altmark
Sent: Friday, November 03, 2006 2:27 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Any way to stop PROP from logging 'select messages'?
On Friday, 11/03/2006 at 01:52 CST, "Huegel, Thomas" <[EMAIL PROTECTED]>
wrote:
> Is there a way to stop PROP from logging certain messages?
Update PROP RTABLE with something like:
*----------------------- -- -- - -------- -------- -------- --------
* FILTER OUT LOGON, LOGOFF, ETC. MESSAGES SO OPERATOR NEEDN'T SEE THEM
*----------------------- -- -- - -------- -------- -------- --------
%LOGON% 19 23 3
%LOGOFF% 19 24 3
%AUTO% 10 13 3
%VARY% 14 17 3
%DSCONNECT% 19 27 3
%RECONNECT% 19 27 3
%CONNECT% 1 80
%DIAL% 19 22 3
%DROP% 19 22 3
> Or even better to stop messages 'DIALED and DROP' from being generated?
No.
Alan Altmark
z/VM Development
IBM Endicott
__________________________________________________________________
<< ella for Spam Control >> has removed VSE-List messages and set aside
VM-List for me
You can use it too - and it's FREE! http://www.ellaforspam.com
The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient
is strictly prohibited.
__________________________________________________________________
<< ella for Spam Control >> has removed VSE-List messages and set aside VM-List for me
You can use it too - and it's FREE! http://www.ellaforspam.com
