Real-time SMF NMI: FTP server transfer initialization record (subtype 100)

Table 1 shows the FTP server transfer initialization self-defining section of SMF record.

Table 1. FTP server transfer initialization self-defining section
Offset	Name	Length	Format	Description
0 (X'0')	Standard SMF header	24	N/A	Standard SMF header; subtype is 100 (X'64')
Self-defining section
24 (X'18')	SMF119SD_TRN	2	Binary	Number of triplets in this record (V1R4: 5, V1R5: 6)
26 (X'1A')		2		Reserved
28 (X'1C')	SMF119IDOff	4	Binary	Offset to TCP⁄IP identification section. *
32 (X'20')	SMF119IDLen	2	Binary	Length of TCP⁄IP identification section. *
34 (X'22')	SMF119IDNum	2	Binary	Number of TCP⁄IP identification sections. *
36 (X'24')	SMF119S1Off	4	Binary	Offset to FTP server transfer initialization section
40 (X'28')	SMF119S1Len	2	Binary	Length of FTP server transfer initialization section
42 (X'2A')	SMF119S1Num	2	Binary	Number of FTP server transfer initialization sections
44 (X'2C')	SMF119S2Off	4	Binary	Offset to FTP server hostname section
48 (X'30')	SMF119S2Len	2	Binary	Length of FTP server hostname section
50 (X'32')	SMF119S2Num	2	Binary	Number of FTP server hostname sections
52 (X'34')	SMF119S3Off	4	Binary	Offset to FTP server first associated data set name section
56 (X'38')	SMF119S3Len	2	Binary	Length of FTP server first associated data set name section
58 (X'3A')	SMF119S3Num	2	Binary	Number of FTP server first associated data set name sections
60 (X'3C')	SMF119S4Off	4	Binary	Offset to FTP server second associated data set name section
64 (X'40')	SMF119S4Len	2	Binary	Length of FTP server second associated data set name section
66 (X'42')	SMF119S4Num	2	Binary	Number of FTP server second associated data set name sections
68 (X'44')	SMF119S5Off	4	Binary	Offset to FTP server security section (V1R5)
72 (X'48')	SMF119S5Len	2	Binary	Length of FTP server security section (V1R5)
74 (X'4A')	SMF119S5Num	2	Binary	Number of FTP server security sections (V1R5)
See Common TCP/IP identification section for the contents of the TCP⁄IP stack identification section.

Table 2 shows the FTP server transfer initialization record section (located physically after the TCP⁄IP identification section in the record). This section is slightly different from the one in the transfer completion record and the field names are therefore different from the completion record. The mapping of this record section is in EZANMFTA (assembler macro) for assembler code and in EZANMFTC (a C header) for C code.

Table 2. FTP server transfer initialization record section
Offset	Name	Length	Description
0	SMF119FT_FSIOPer	1	FTP Operation according to SMF77 subtype classification (this is really redundant information, the same information can be found in SMF119FT_FSICmd). X'01': Append X'02': Delete X'03': Rename X'04': Retrieve X'05': Store X'06': Store Unique
1	SMF119FT_FSIActPas	1	Passive or active mode data connection: X'00' active using default ip and port X'01' active using PORT X'02' active using EPRT X'03' passive using PASV X'04' passive using EPSV
2		2	Reserved
4	SMF119FT_FSICmd	4	FTP command (according to RFC 959+; see Related protocol specifications for information about accessing RFCs)
8	SMF119FT_FSIFType	4	File type (SEQ, JES, or SQL)
12	SMF119FT_FSIDRIP	16	Remote IP address (data connection)
28	SMF119FT_FSIDLIP	16	Local IP address (data connection)
44	SMF119FT_FSIDRPort	2	Remote port number (data connection)
46	SMF119FT_FSIDLPort	2	Local port number (data connection - server)
48	SMF119FT_FSICRIP	16	Remote IP address (control connection)
64	SMF119FT_FSICLIP	16	Local IP address (control connection)
80	SMF119FT_FSICRPort	2	Remote port number (control connection - client)
82	SMF119FT_FSICLPort	2	Local port number (control connection - server)
84	SMF119FT_FSISUser	8	Client user ID on server
92	SMF119FT_FSIFType	1	Data type A: ASCII E: EBCDIC I: Image B: Double-byte U: UCS-2
93	SMF119FT_FSIMode	1	Transmission mode B: Block C: Compressed S: Stream
94	SMF119FT_FSIStruct	1	Data structure F: File R: Record
95	SMF119FT_FSIDsType	1	Data set type S: SEQ P: PDS H: z/OS® UNIX file
96	SMF119FT_FSISTime	4	Data connection start time, formatted in 1/100 seconds since midnight [using Coordinated Universal Time (UTC)]
100	SMF119FT_FSISDate	4	Data connection start date (format: 0cyydddF). If the start date is not available, the value specified is X'0000000F'.
104	SMF119FT_FSICSTime	4	Control connection start time in 1/100 seconds since midnight [using Coordinated Universal Time (UTC)] (FTP session start time)
108	SMF119FT_FSICSDate	4	Control connection start date (format: 0cyydddF). If the end date is not available, the value specified is X'0000000F' (FTP sessions start date)
112	SMF119FT_FSIM1	8	PDS Member name
120	SMF119FT_FSIM2	8	Second PDS member name (if rename operation)
128	SMF119FT_FSICConnID	4	TCP connection ID of FTP control connection (z/OS version V1R8 and later)
132	SMF119FT_FSIDConnID	4	TCP connection ID of FTP data connection, or zero (z/OS version V1R8 and later)
136	SMF119FT_FSISessionID	15	FTP activity logging session ID (z/OS version V1R8 and later)
151	Reserved	1	Reserved (z/OS version V1R8 and later)

Table 3 shows the FTP server hostname section, physically located after the FTP server transfer initialization section. This section is optional and is identical to the one present in the transfer completion record, and is present only if a gethostbyaddr operation was performed for the Local IP address.

Table 3. FTP server hostname section
Offset	Name	Length	Description
0	SMF119FT_Hostname	n	Hostname

Table 4 shows the FTP server MVS™ data set name section, physically located after the FTP server hostname section (if present) or the FTP server transfer initialization section. This section represents the MVS data set names associated with the file transfer and is identical to the one present in the completion record. A second instance of the section is included for Rename File Transfer operations.

Table 4. FTP server MVS data set name section
Offset	Name	Length	Description
0	SMF119FT_MVSDataSet	44	MVS Data set name

Table 5 shows the FTP server z/OS UNIX file name section, physically located after the FTP server MVS data set name section. It is identical to the one present in the completion record. One or two names might be included in this section.

Table 5. FTP server z/OS UNIX file name section
Offset	Name	Length	Description
0	SMF119FT_HFSLen1	2	Length of first z/OS UNIX file name
2	SMF119FT_HFSName1	n	z/OS UNIX file name
2+n	SMF119FT_HFSLen2	2	Length of second z/OS UNIX file name (0 if only one z/OS UNIX file name is being reported)
4+n	SMF119FT_HFSName2	m	z/OS UNIX file name

Table 6 displays the FTP server security section.

Table 6. FTP server security section
Offset	Name	Length	Format	Description
0 (X'0')	SMF119FT_FSMechanism	1	EBCDIC	Protection Mechanism N: None T: TLS G: GSSAPI A: AT-TLS
1 (X'1')	SMF119FT_FSCProtect	1	EBCDIC	Control Connection Protection Level N: None C: Clear S: Safe P: Private
2 (X'2')	SMF119FT_FSDProtect	1	EBCDIC	Data Connection Protection Level N: None C: Clear S: Safe P: Private
3 (X'3')	SMF119FT_FSLoginMech	1	EBCDIC	Login Method P: Password C: Certificate T: Kerberos ticket
4 (X'4')	SMF119FT_FSProtoLevel	8	EBCDIC	Protocol level (present only if Protocol Mechanism is TLS or AT-TLS). Possible values are: SSLV2 SSLV3 TLSV1 TLSV1.1 TLSV1.2
12 (X'C')	SMF119FT_FSCipherSpec	20	EBCDIC	Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS). Possible values when Protocol Level is SSLV2 RC4 US RC4 Export RC2 US RC2 Export DES 56-bit Triple-DES US Possible values when Protocol Level is SSLV3, TLSV1, TLSV1.1, or TLSV1.2: SSL_NULL_MD5 SSL_NULL_SHA SSL_RC4_MD5_EX SSL_RC4_MD5 SSL_RC4_SHA SSL_RC2_MD5_EX SSL_DES_SHA SSL_3DES_SHA SSL_AES_128_SHA SSL_AES_256_SHA
32 (X'20')	SMF119FT_FSProtoBufSize	4	Binary	Negotiated protection buffer size
36 (X'24')	SMF119FT_FSCipher	2	EBCDIC	Hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS). If the value is 4X, the Cipher Specification must be obtained from the SMF119FT_FSCipher4 field.
38 (X'26')	SMF119FT_FSFips140	1	Binary	FIPS 140 status X'00': FIPS 140 off X'01': FIPS 140 on
39 (X'27')	SMF119FT_FSCipher4	4	EBCDIC	Four byte hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).