FTP server transfer completion record (subtype 70)

The FTP server transfer completion record is collected when the z/OS® FTP server completes processing of one of the following FTP file transfer operations: file appending, file deletion, file storage (includes both store and store unique operations), file retrieval, or file renaming. A common format for the record is used for each FTP file transfer operation, so the record contains an indication of which operation was performed. The record also contains optional sections provided when gethostbyaddr( ) processing was performed during the file transfer operation, as well as when the file names involved in the transfer operation were MVS™ or z/OS UNIX filenames.

The Type 119 FTP server transfer completion record is collected at the same point in file transfer processing as the equivalent Type 118 FTP server SMF records. The Type 118 records used different record subtypes, as opposed to a field within the SMF record information, to represent the different file transfer operations being recorded.

See Table 1 for the contents of the TCP/IP stack identification section. For the FTP server transfer completion record, the TCP/IP stack identification section indicates FTPS as the subcomponent and X'08' (event record) as the record reason.

Table 1 shows the FTP server transfer completion record self-defining section:

Table 1. FTP server transfer completion record self-defining section
Offset	Name	Length	Format	Description
0(X'0')	Standard SMF Header	24		Standard SMF header; subtype is 70(X'46')
Self-defining section
24(X'18')	SMF119SD_TRN	2	Binary	Number of triplets in this record (6)
26(X'1A')		2	Binary	Reserved
28(X'1C')	SMF119IDOff	4	Binary	Offset to TCP/IP identification section
32(X'20')	SMF119IDLen	2	Binary	Length of TCP/IP identification section
34(X'22')	SMF119IDNum	2	Binary	Number of TCP/IP identification sections
36(X'24')	SMF119S1Off	4	Binary	Offset to FTP server transfer completion section
40(X'28')	SMF119S1Len	2	Binary	Length of FTP server transfer completion section
42(X'2A')	SMF119S1Num	2	Binary	Number of FTP server transfer completion sections
44(X'2C')	SMF119S2Off	4	Binary	Offset to FTP server host name section
48(X'30')	SMF119S2Len	2	Binary	Length of FTP server host name section
50(X'32')	SMF119S2Num	2	Binary	Number of FTP server host name sections
52(X'34')	SMF119S3Off	4	Binary	Offset to FTP server first associated data set name section
56(X'38')	SMF119S3Len	2	Binary	Length of FTP server first associated data set name section
58(X'3A')	SMF119S3Num	2	Binary	Number of FTP server first associated data set name sections
60(X'3C')	SMF119S4Off	4	Binary	Offset to FTP server second associated data set name section
64(X'40')	SMF119S4Len	2	Binary	Length of FTP server second associated data set name section
66(X'42')	SMF119S4Num	2	Binary	Number of FTP server second associated data set name sections
68 (X'44')	SMF119S5Off	4	Binary	Offset to FTP server Security section
72 (X'48')	SMF119S5Len	2	Binary	Length of FTP server Security section
74 (X'4A')	SMF119S5Num	2	Binary	Number of FTP server Security sections

Table 2 shows the FTP server transfer completion specific section of this SMF record.

Table 2. FTP server transfer completion record section
Offset	Name	Length	Format	Description
0(X'0')	SMF119FT_FSOper	1	Binary	FTP Operation according to SMF77 subtype classification: X'01': Append X'02': Delete X'03': Rename X'04': Retrieve X'05': Store X'06': Store Unique
1(X'1')		3	Binary	Reserved
4(X'4')	SMF119FT_FSCmd	4	EBCDIC	FTP command (according to RFC 959+)
8(X'8')	SMF119FT_FSFType	4	EBCDIC	File type (SEQ, JES, or SQL)
12(X'C')	SMF119FT_FSDRIP	16	Binary	Remote IP address (data connection). This field is 0 for Delete or Rename operation.
28(X'1C')	SMF119FT_FSDLIP	16	Binary	Local IP address (data connection). This field is 0 for Delete or Rename operation.
44(X'2C')	SMF119FT_FSDRPort	2	Binary	Remote port number (data connection - client). This field is 0 for Delete or Rename operation.
46(X'2E')	SMF119FT_FSDLPort	2	Binary	Local port number (data connection - server). This field is 0 for Delete or Rename operation.
48 (X'30')	SMF119FT_FSCRIP	16	Binary	Remote IP address (control connection)
64(X'40')	SMF119FT_FSCLIP	16	Binary	Local IP address (control connection)
80 (X'50')	SMF119FT_FSCRPort	2	Binary	Remote port number (control connection - client)
82 (X'52')	SMF119FT_FSCLPort	2	Binary	Local port number (control connection - server)
84(X'54')	SMF119FT_FSSUser	8	EBCDIC	Client User ID on server
92(X'5C')	SMF119FT_FSType	1	EBCDIC	Data type: A: ASCII E: EBCDIC I: Image B: Double-byte U: UCS-2
93(X'5D')	SMF119FT_FSMode	1	EBCDIC	Transmission mode: B: Block C: Compressed S: Stream
94(X'5E')	SMF119FT_FSStruct	1	EBCDIC	Data structure: F: File R: Record
95(X'5F')	SMF119FT_FSDsType	1	EBCDIC	Data set type: S: SEQ P: PDS H: z/OS UNIX
96(X'60')	SMF119FT_FSSTime	4	Binary	Transmission start time of day
100(X'64')	SMF119FT_FSSDate	4	Packed	Transmission start date
104(X'68')	SMF119FT_FSETime	4	Binary	Transmission end time of day
108(X'6C')	SMF119FT_FSEDate	4	Packed	Transmission end date
112(X'70')	SMF119FT_FSDur	4	Binary	File transmission duration in units of 1/100 seconds
116(X'74')	SMF119FT_FSBytes	8	Binary	Transmission byte count; 64-bit integer
124(X'7C')	SMF119FT_FSLReply	4	EBCDIC	Last reply to client (3-digit RFC 959 code, right-aligned)
128(X'80')	SMF119FT_FSM1	8	EBCDIC	PDS Member name
136(X'88')	SMF119FT_FSRS	8	EBCDIC	Reserved for abnormal end information
144(X'90')	SMF119FT_FSM2	8	EBCDIC	Second PDS member name (if rename operation)
152(X'98')	SMF119FT_FSBytesFloat	8	Floating point hex	z/OS floating point format for transmission byte count
160 (X'A0')	SMF119FT_FSCConnID	4	Binary	TCP connection ID of FTP control connection
164 (X'A4')	SMF119FT_FSDConnID	4	Binary	TCP connection ID of FTP data connection, or 0. This field is 0 for Delete or Rename operation.
168 (X'A8')	SMF119FT_FSSessionID	15	EBCDIC	FTP activity logging session ID. The activity logging session ID uniquely identifies the FTP session between a client and a server. The identifier is created by combining the job name of the FTP daemon with a 5-digit number in the range 00000 - 99999.
183 (X'B7')		1	Binary	Reserved

Table 3 shows the FTP server transfer completion host name section. This section is optional and is present if gethostbyaddr operation was performed for the local IP address.

Table 3. FTP server transfer completion record section: Host name
Offset	Name	Length	Format	Description
0(X'0')	SMF119FT_FSHostname	n	EBCDIC	Host Name

Table 4 shows the FTP server transfer completion first associated data set name section. This section represents the server MVS or z/OS UNIX data set name associated with a rename or file transfer. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of filename represented here.

Table 4. FTP server transfer completion record section: First associated data set name
Offset	Name	Length	Format	Description
0(X'0')	SMF119FT_FSFileName1	n	EBCDIC	Server MVS or z/OS UNIX file name associated with the file transfer or rename operation. When the operation is a rename, this is the file or data set original name.

Table 5 shows the FTP server transfer completion second associated data set name section. This section represents an MVS or z/OS UNIX data set name associated with the rename operation. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of file name represented here.

Table 5. FTP server transfer completion record section: Second associated data set name
Offset	Name	Length	Format	Description
0(X'0')	SMF119FT_FSFileName2	n	EBCDIC	Second MVS or z/OS UNIX file name associated with a rename. This is the new file or data set name.

Table 6 shows the FTP server security section:

Table 6. FTP server security section
Offset	Name	Length	Format	Description
0 (X'0')	SMF119FT_FSMechanism	1	EBCDIC	Protection Mechanism: N: None T: TLS G: GSSAPI A: AT-TLS
1 (X'1')	SMF119FT_FSCProtect	1	EBCDIC	Control connection protection level: N: None C: Clear S: Safe P: Private
2 (X'2')	SMF119FT_FSDProtect	1	EBCDIC	Data connection Protection Level: N: None C: Clear S: Safe P: Private
3 (X'3')	SMF119FT_FSLoginMech	1	EBCDIC	Login Method: P: Password C: Certificate T: Kerberos ticket
4 (X'4')	SMF119FT_FSProtoLevel	8	EBCDIC	(Control connection.) Protocol level (present only if Protocol Mechanism is TLS or AT-TLS). Possible values are: SSLV2 SSLV3 TLSV1 TLSV1.1 TLSV1.2
12 (X'C')	SMF119FT_FSCipherSpec	20	EBCDIC	(Control connection.) Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS). Possible values when Protocol Level is SSLV2: RC4 US RC4 Export RC2 US RC2 Export DES 56-Bit Triple DES US Possible values when Protocol Level is SSLV3, TLSV1, TLSV1.1, or TLSV1.2: SSL_NULL_MD5 SSL_NULL_SHA SSL_RC4_MD5_EX SSL_RC4_MD5 SSL_RC4_SHA SSL_RC2_MD5_EX SSL_DES_SHA SSL_3DES_SHA SSL_AES_128_SHA SSL_AES_256_SHA If this field is blank, the value of SMF119FT_FSCipher for the cipher is used for the connection.
32 (X'20')	SMF119FT_FSProtoBufSize	4	Binary	Negotiated protection buffer size
36(X'24')	SMF119FT_FSCipher	2	EBCDIC	(Control connection.) Hexadecimal value of cipher specification (present only when Protocol Mechanism is TLS or AT-TLS). If the value is 4X, the cipher specification must be obtained from the SMF119FT_FSCipher4 field.
38(X'26')	SMF119FT_FSFips140	1	Binary	FIPS 140 status X'00': FIPS 140 off X'01': FIPS 140 on
39(X'27')	SMF119FT_FSCipher4	4	EBCDIC	(Control connection.) Four byte hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).