On Tue, Mar 3, 2020 at 11:50 AM Grant Taylor < [email protected]> wrote:
> On 3/3/20 10:32 AM, don isenstadt wrote: > > Hello..we have many users who are still using port 23 unsecured..so we > > can easily identify them with a display tcpip command po=23. > > related n00b question: > > Is there a way to associate TCP connections to TN3270 (?) devices? > > Is there a way to associate TN3270 devices to users? > > It may be a multi-step process, and have problems with newly opened and > recently closed connections in between the steps, but I would expect > there to be a way to do this. > > I would also expect this to be somewhat more reliable than reverse DNS > in that this would come from data directly accessible on the mainframe > and not rely on data sources off of / further away from the mainframe. > (I trust closer data sources more than I do further away data sources.) > > > > -- > Grant. . . . > unix || die > > There is a way. But it can be a bit "complicated". I don't know the programming interfaces to get the information. But you can get the IP address given an LU name. The operator command looks like: *D NET,,ID=E08VETHH* IST097I DISPLAY ACCEPTED IST075I NAME = UICINET1.E08VETHH, TYPE = DYNAMIC APPL 584 IST486I STATUS= ACT/S, DESIRED STATE= ACTIV IST1447I REGISTRATION TYPE = CDSERVR IST1629I MODSRCH = NEVER IST977I MDLTAB=***NA*** ASLTAB=***NA*** IST861I MODETAB=MODETABP USSTAB=***NA*** LOGTAB=***NA*** IST934I DLOGMOD=***NA*** USS LANGTAB=***NA*** IST1632I VPACING = 1 IST1938I APPC = NO IST597I CAPABILITY-PLU ENABLED ,SLU ENABLED ,SESSION LIMIT 00000001 IST231I APPL MAJOR NODE = E08ACCES IST1425I DEFINED USING MODEL E08VET?? IST212I ACBNAME = ECCVETHH IST654I I/O TRACE = OFF, BUFFER TRACE = OFF IST1500I STATE TRACE = OFF IST271I JOBNAME = TN3270, STEPNAME = TN3270, DSPNAME = IST6B7ED IST228I ENCRYPTION = OPTIONAL , TYPE = DES IST1563I CKEYNAME = E08VETHH CKEY = PRIMARY CERTIFY = NO IST1552I MAC = NONE MACTYPE = NONE IST1050I MAXIMUM COMPRESSION LEVEL - INPUT = 0, OUTPUT = 0 IST1633I ASRCVLM = 1000000 IST1634I DATA SPACE USAGE: CURRENT = 0 MAXIMUM = 136 IST1634I DATA SPACE USAGE: CURRENT = 0 MAXIMUM = 136 *IST1669I IPADDR..PORT 10.43.130.61..53971* IST171I ACTIVE SESSIONS = 0000000001, SESSION REQUESTS = 0000000000 IST314I END You can then do the TSO NETSTAT command to try a "reverse DNS lookup" by: NETSTAT 10.43.130.61 However, on our system, there is not a "reverse DNS" lookup on workstation names, it appears. -- People in sleeping bags are the soft tacos of the bear world. Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
