ITschak, For an address space that is not SUB=MSTR, you can examine ASCB -> ASSB -> JSAB -> JSABUSID I believe all three control blocks should be SP 245 (common).
Good luck, Dori On Sun, Sep 16, 2018 at 4:29 PM, ITschak Mugzach <[email protected]> wrote: > Binyamin, > > What surprised me what that all ASXBs has the same address... So, how can > I get the userid associated with the ASCB? > > ITschak > > On Sun, Sep 16, 2018 at 4:17 PM Binyamin Dissen < > [email protected]> > wrote: > > > Because the ASXB is in private. You need to use the target memorie's > ASID. > > > > On Sun, 16 Sep 2018 15:46:32 +0300 ITschak Mugzach <[email protected]> > > wrote: > > > > :>Few days ago someone (can't recall the thread) asked about scanning ( > > ascb > > :>chain. I tried to follow ascb ASXB and found that it always point to > my > > :>aSXB, even when I take the offset from the chain. Any idea why? and > > :>alternatively, how can I find the userid the ascb is associated with? > > > > -- > > Binyamin Dissen <[email protected]> > > http://www.dissensoftware.com > > > > Director, Dissen Software, Bar & Grill - Israel > > > > > > Should you use the mailblocks package and expect a response from me, > > you should preauthorize the dissensoftware.com domain. > > > > I very rarely bother responding to challenge/response systems, > > especially those from irresponsible companies. > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > > > > -- > ITschak Mugzach > *|** IronSphere Platform* *|* *Information Security Contiguous Monitoring > for Legacy **| * > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- [image: Model9] Dori Polotsky R&D m: +972-54-4584663 e: [email protected] w: www.model9.io ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
