Plan b) use https://colinpaice.blog/category/wireshark/zwireshark/ on z/OS You can specify an IP address or port, and it produces a wireshark format file which should have the info you need
Colin On Mon, 14 Apr 2025 at 11:53, Lindy Mayfield < [email protected]> wrote: > Thank you Kirk, and to all who answered me. I think I understand it now. > > Some tcp/ip process I have appears to be opening a listen port, but only > briefly I think, so I cannot catch it with a netstat. That leaves me, I > think, with two other options, a ctrace, and for me they are a bit of a > pita to setup, and catching it with some SMF 119 subtype, I thought I'd try > that one first. :) > > Best regards, > Lindy > ________________________________ > From: IBM Mainframe Discussion List on behalf of Kirk Wolf > Sent: Sunday, April 13, 2025 8:11 PM > To: [email protected] > Subject: Re: How do I enable SMF for TCP/IP Record type 119? > > EXTERNAL > > High level: > > 1) Figure out which SMF 119 subtypes that you want > > 2) Enable the product that writes them (either z/OS Comm Server or z/OS > OpenSSH or even Co:Z SFTP) to TRY to write them. Consult the docs. > > 3) Enable the recording of those subtypes in SMFPRMxx PARMLIB. > > Kirk Wolf > Dovetailed Technologies > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
