Colin, Do you plan to submit zWireshark so it can be available at cbttape.org? Where I work, CBT Tape is considered a trusted source.
Regards, Mark Regan On Mon, Apr 14, 2025 at 8:07 AM Colin Paice < 0000059d4daca697-dmarc-requ...@listserv.ua.edu> wrote: > Plan b) use https://colinpaice.blog/category/wireshark/zwireshark/ on z/OS > You can specify an IP address or port, and it produces a wireshark format > file which should have the info you need > > Colin > > On Mon, 14 Apr 2025 at 11:53, Lindy Mayfield < > 000005a2ba9c925b-dmarc-requ...@listserv.ua.edu> wrote: > > > Thank you Kirk, and to all who answered me. I think I understand it now. > > > > Some tcp/ip process I have appears to be opening a listen port, but only > > briefly I think, so I cannot catch it with a netstat. That leaves me, I > > think, with two other options, a ctrace, and for me they are a bit of a > > pita to setup, and catching it with some SMF 119 subtype, I thought I'd > try > > that one first. :) > > > > Best regards, > > Lindy > > ________________________________ > > From: IBM Mainframe Discussion List on behalf of Kirk Wolf > > Sent: Sunday, April 13, 2025 8:11 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: How do I enable SMF for TCP/IP Record type 119? > > > > EXTERNAL > > > > High level: > > > > 1) Figure out which SMF 119 subtypes that you want > > > > 2) Enable the product that writes them (either z/OS Comm Server or z/OS > > OpenSSH or even Co:Z SFTP) to TRY to write them. Consult the docs. > > > > 3) Enable the recording of those subtypes in SMFPRMxx PARMLIB. > > > > Kirk Wolf > > Dovetailed Technologies > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN