dovetail.com

[wm212333]

What are the formats of the SFTPC and SFTPS SMF 119 records?

[dovetail]

Co:Z SFTP cuts SMF 119 records in the same format as IBM FTP, which are documented in "z/OS Comm Server: IP Configuration Reference" - Appndx C: SMF type 119 records.

Co:Z SFTP writes the following SMF 119 subtypes:

3 - FTP Client Transfer Completion
70 - FTP Server Transfer Completion

The userid must have READ access to the FACILITY/BPX.SMF SAF class in order to be able to cut SMF records, and SMF recording must be enabled on the system for type 119.

In addition to SMF recording, Co:Z SFTP will also send SMF 119 records to a UDP Datagram socket named "/var/log/cozsftp.smf.sock" if it exists. (The socket name may be overridden by setting the SFTP_SMF_SOCK environment variable). This option may be used to obtain real-time SMF records without using SMF exits, and is available even if actual SMF recording is not enabled.

[Shady]

[dovetail]

Unfortunately not. Co:Z SFTP (both client and server) run non-APF authorized under the logged in userid. In order to allow the process to write SMF records, BPX.SMF SAF authority must be available.