The Traffic Regulation Manager daemon (TRMD) is responsible for logging defensive filter events that are detected by the stack. These events include filter-match logging and the creation, deletion, and updating of defensive filters.
TRMD and syslogd provide the logging service for defensive filtering. In a Common INET environment, you must configure one instance of TRMD for each stack on a z/OS® system. For information about configuring TRMD, see TRMD.