Does the user have SFS directories accessed? When you do, there's an IUCV connection to the SFS server so that it can invalidate the directory in the CMS virtual machine. One would hope the SFS server does the invalidate only once, but I have never looked. And there would be a connection to the SFS recovery server but I cannot see that would cause traffic. I would be tempted to run a TRACE EXT TERM in the userid and I could let you borrow the code that reads the vtime/ttime from the VMDBK in microseconds.
Rob -- Rob van der Heij rvdheij @ gmail.com Velocity Software, Inc
