Not so strange. Other posters suggested asking what is 'proof', and that
is excellent advise. Do that.
I once heard of a situation where the data was thought to be encrypted
but turned out to be open. I have seen trace messages that suggested
encryption but turned out to be misleading.
For your own curiosity, see info APAR II12014 on how to do a packet
trace. You can format and print the trace with IPCS (see below). If the
data is compressed then the trace may not prove anything.
//IPCS EXEC PGM=IKJEFT01
//IPCSDDIR DD DSN=My.DDIR,DISP=OLD
//IPCSPRNT DD DSN=My.WORK.TXT,DISP=(OLD,KEEP,KEEP)
//SYSTSPRT DD SYSOUT=*
//SYSTSIN DD *
IPCS NOPARM
SETDEF NOCONFIRM PRINT NOTERM
SETDEF DSN('SYS2.CTRACE1') LIST NOCONFIRM
PROFILE NOPAGESIZE LINESIZE(80)
CTRACE COMP(SYSTCPDA) SHORT OPTIONS((FORMAT,DUMP))
SETDEF CONFIRM NOPRINT TERM
END
HTH.
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Terry Linsley
Sent: Thursday, June 09, 2005 12:24 PM
To: [email protected]
Subject: Strange Auditor Questions
The organization we service is suffering through an audit at the moment.
One of the things the auditors looked at was the secure file transfer
proces I
had setup for that organization (OpenSSH based). They explained it
sufficiently, but the auditor had one last requirement. She wanted
proof that
the data was actually being encrypted. ????
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html