Do you have FTP logging enabled in your SYS1.TCPPARMS(FTPDATA)? I think this is done with:
FTPLOGGING TRUE This will produce some messages that are sent to the syslog daemon. That way, you can see every incoming FTP transaction that logs the date/time, foreign ip address, username, MVS dataset name, DCB attributes and bytes transferred. You can even take this 1 step further by enabling trace by issuing the following command: F FTPSERVE,DEBUG=(FLO,FSC(3),CMD) This gives you even more detail info that is logged into the syslog daemon. The trick is to know where you syslog daemon is configured to store the syslog data. Look in /etc/syslog.conf and see what the *.debug is set to store the debug data. Armed with this info, you can go back to your open systems people and work thru the log file and try to find where the contamination is occuring. Bryan Klimek Mayo Clinic ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
