I had forgotten about the UNIX syslog daemon (syslogd). I wonder how many shops have it set up and running. We do. I have it set up to log into /var/log/daemon.yyyy-mm-dd where "yyyy-mm-dd" is the Gregorian date. I also have it set up to switch to a new file every midnight (local). I only keep the last 3 days.
-- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets® 9151 Boulevard 26 • N. Richland Hills • TX 76010 (817) 255-3225 phone • [email protected] • www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets® is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. –The Chesapeake Life Insurance Company®, Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Elardus Engelbrecht > Sent: Friday, September 07, 2012 7:27 AM > To: [email protected] > Subject: Re: Who is sending this ftp file > > Rajaram Kalahasti wrote: > > > I our shop, some job on the mainframe is sending a file ( thru ft) > to a windows box. > >We lost track of which job it is. > > Tsk, tsk, tsk. What does RACF (SERVAUTH for example) and SMF tell you > about the FTP program and ip and port usage usage? > > I really hope you have disabled ANONYMOUS user on your FTP server... > Also check your FTPLOGGING setting too... > > >Looked up syslog -- no information there about the ftp. > > Then your info, if your FTP server is setup correctly in the first > place, should be on > > tmp/syslogd or somewhere there on your z/OS system. > > But look first in /etc/syslog.conf for your configuration details. Or > check your FTP server profile settings. > > Groete / Greetings > Elardus Engelbrecht > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
