








	*SMF Tools*

SMF Type 119 Record - Subtype 21

This table shows the record layout for type 119 SMF records
(TN3270E Telnet Server SNA Session Termination Record).

List of other SMF record layouts available.
List of sample SMF reports.

Purpose: Transmission Control Protocol/Internet Protocol (TCP/IP) writes type 119 records to collect statistics about Telnet servers and clients, FTP servers and clients, and API activity and stack usage information.

The Subtype 21 TN3270E Telnet server (Telnet) SNA session termination record is collected when the z/OS TN3270E Telnet server terminates a SNA session with a Telnet client. The information in this record is associated with a given LU-LU session, and not to the TCP/IP Telnet connection; for example, if multiple LU-LU sessions use the same Telnet connection, separate SNA session termination records are reported for each LU-LU session.

The Type 119 Telnet SNA Session termination record is collected at the same point in session processing as the equivalent Type 118 TN3270E Telnet server "LOGF" SMF record.

Guideline: Because the Telnet SNA session termination record contains a superset of the information that the Telnet SNA session initiation record contains, you should collect only the Telnet SNA session termination records.

It's easy to report on SMF 119 data! (Jump to sample reports)

We have a low-cost 4GL report writer especially for SMF files. It's called Spectrum SMF Writer.

Spectrum SMF Writer handles the difficult SMF record parsing for you automatically. You just specify which fields you want to see.

Spectrum SMF Writer also converts the arcane date and time fields and reformats them into an attractive report.

Plus, Spectrum SMF Writer can export SMF data as comma delimited files to use on your PC.

SMF Type 119 Record -- TN3270E Telnet Server SNA Session Termination Record
Offset (Dec.)	Offset (Hex)	Name	Length	Format	Description
0	0	SMF119LEN	2	binary	Record length. This field and the next field (total of four bytes) form the RDW (record descriptor word). See “Standard SMF Record Header” on page 13-1 for a detailed description.
2	2	SMF119SEG	2	binary	Segment descriptor (see record length field).
4	4	SMF119FLG	1	binary	System indicator Bit Meaning When Set 0 New record format 1 Subtypes used 2 Reserved. 3-6 Version indicators* 7 System is running in PR/SM mode.*See “Standard SMF Record Header” on page 13-1 for a detailed description.
5	5	SMF119RTY	1	binary	Record type 119 (X'77').
6	6	SMF119TME	4	binary	Time since midnight, in hundredths of a second, that the record was moved into the SMF buffer.
10	A	SMF119DTE	4	packed	Date when the record was moved into the SMF buffer, in the form 0cyydddF. See “Standard SMF Record Header” on page 13-1 for a detailed description.
14	E	SMF119SID	4	EBCDIC	System identification (from the SMFPRMxx SID parameter).
18	12	SMF119SSI	4	EBCDIC	Subsystem identification.
22	16	SMF119STY	2	binary	Record subtype.
Self Defining Section
24	18	SMF119TRN	2	binary	Number of triplets in this record. A triplet is a set of three SMF fields (offset/length/number values) that defines a section of the record. The offset is the offset from the RDW.
26	1A	--	2	binary	Reserved.
28	1C	SMF119IDOff	4	binary	Offset to TCP/IP identification section from RDW.
32	20	SMF119IDLen	2	binary	Length of TCP/IP identification section.
34	22	SMF119IDNum	2	binary	Number of TCP/IP identification sections.
36	24	SMF119S1Off	4	Binary	Offset to first data section
40	28	SMF119S1Len	2	Binary	Length of first data section
42	2A	SMF119S1Num	2	Binary	Number of first data sections
44	2C	SMF119S2Off	4	Binary	Offset to 2nd data section
48	30	SMF119S2Len	2	Binary	Length of 2nd data section
50	32	SMF119S2Num	2	Binary	Number of 2nd data sections
52	34	SMF119S3Off	4	Binary	Offset to 3rd data section
56	38	SMF119S3Len	2	Binary	Length of 3rd data section
58	3A	SMF119S3Num	2	Binary	Number of 3rd data sections
60	3C	SMF119S4Off	4	Binary	Offset to 4th data section
64	40	SMF119S4Len	2	Binary	Length of 4th data section
66	42	SMF119S4Num	2	Binary	Number of 4th data sections
TCP/IP Identification Section For the TCP/IP statistics record, the TCP/IP stack identification section indicates STACK as the subcomponent and x'08' (event record), x'20' (recording stop), or x'10' (recording shutdown) as the record reason. (Offset from beginning of record: SMF119IDOff)
0	0	SMF119TI_ SYSName	8	EBCDIC	System name from SYSNAME in IEASYSxx
8	8	SMF119TI_ SysplexName	8	EBCDIC	Sysplex name from SYSPLEX in COUPLExx
16	10	SMF119TI_ Stack	8	EBCDIC	TCP/IP stack name
24	18	SMF119TI_ ReleaseID	8	EBCDIC	z/OS Communications Server TCP/IP release identifier
32	20	SMF119TI_ Comp	8	EBCDIC	TCP/IP subcomponent (right padded with blanks): FTPC FTP Client FTPS FTP server IP IP layer STACK Entire TCP/IP stack TCP TCP layer TN3270C TN3270 Client TN3270S TN3270 server UDP UDP layer
40	28	SMF119TI_ ASName	8	EBCDIC	Started task qualifier or address space name of address space that writes this SMF record
48	30	SMF119TI_ UserID	8	EBCDIC	User ID of security context under which this SMF record is written
56	38	--	2	EBCDIC	Reserved
58	3A	SMF119TI_ ASID	2	Binary	ASID of address space that writes this SMF record
60	3C	SMF119TI_ Reason	1	Binary	Reason for writing this SMF record: X'08' Event record X'C0' Interval statistics record, more records follow X'80' Interval statistics record, last record in set X'60' End-of-statistics record, more records follow X'20' End-of-statistics record, last record in set X'50' Shutdown starts record, more records follow X'10' Shutdown starts record, last record in set
61	3D	--	3	EBCDIC	Reserved
Subtype 21 - Telnet SNA session termination section of this SMF record(Offset from beginning of record: SMF119S1Off)
0	0	SMF119TN_ NTLU	8	EBCDIC	Telnet LU name
8	8	SMF119TN_ NTAppl	8	EBCDIC	Host application name
16	10	SMF119TN_ NTLdev	4	Binary	Telnet internal logical device number
20	14	SMF119TN_ NTRIP	16	Binary	Remote (client) IP address
36	24	SMF119TN_ NTLIP	16	Binary	Local (Telnet) IP address
52	34	SMF119TN_ NTRPort	2	Binary	Remote (client) port number
54	36	SMF119TN_ NTLPort	2	Binary	Local (Telnet) port number
56	38	SMF119TN_ NTHostNm	8	EBCDIC	TCP/IP Host name
64	40	SMF119TN_ NTInByte	8	Binary	Inbound byte count
72	48	SMF119TN_ NTOutByte	8	Binary	Outbound byte count
80	50	SMF119TN_ NTiTime	4	Binary	Time of session initiation
84	54	SMF119TN_ NTiDate	4	Packed	Date of session initiation
88	58	SMF119TN_ NTtTime	4	Binary	Time of session termination
92	5C	SMF119TN_ NTtDate	4	Packed	Date of session termination
96	60	SMF119TN_ NTDur	4	Binary	Session duration in units of 1/100 seconds
100	64	SMF119TN_ NTSType	1	Binary	Telnet session type: 0 UNKNOWN 1 TN3270 2 TN3270E 3 LINEMODE 4 DBCSTRANSFORM 5 BINARY
101	65	SMF119TN_ NTLUSel	1	Binary	Telnet LU selection method: 0 LU chosen by server 1 LU requested by client
102	66	SMF119TN_ NTSSL	1	Binary	SSL status: 0 No SSL session 1 Server authentication only 2 Server and client authentication (REQUIRED/SSLCERT): * If AT-TLS policy (REQUIRED), then check SAF, and user ID is not required to be returned. * If TN profile control (SSLCERT), then no SAF. 3 Server and client authentication (SAFCHECK/SAFCERT): * If AT-TLS policy (SAFCHECK), then SAF check requires user ID returned. * If TN profile control (SAFCERT), then SAF check requires user ID returned. 4 Server and client authentication (FULL): * AT-TLS policy only. Optional client certificate. SSL cert if provided. SAF check, user ID is not required. 5 Server and client authentication (PASSTHRU) * AT-TLS policy only. Optional client certificate. No SSL cert if provided. SAF check, user ID is not required.
103	67	--	1	Binary	Reserved
104	68	SMF119TN_ NTCopt	1	Binary	Telnet connection options negotiated for this connection: * 1000 0000 TN3270E * 0100 0000 Terminal type * 0010 0000 End of Record * 0001 0000 Transmit binary * 0000 1000 Echos * 0000 0100 Suppress go ahead * 0000 0010 Timemark * 0000 0001 New Environment TN3270E connection options negotiated for this connection. More than one of these options can be set.
105	69	--	1	Binary	Reserved
106	6A	SMF119TN_ NT32opt	2	Binary	TN3270E connection options negotiated for this connection. First Byte: * 1000 0000 Bind image * 0100 0000 SysRequest * 0010 0000 Responses * 0001 0000 SCS control codes * 0000 1000 DCS control codes * 0000 0100 Contention Resolution * 0000 0010 FMH Support * 0000 0001 SNA Sense Support Second Byte * 1000 0000 Suppress Header Byte Doubling * 0xxx xxxx Reserved TN3270E connection options negotiated for this connection. More than one of these options can be set.
108	6C	SMF119TN_ NTRCode	8	EBCDIC	Session termination reason code. The values in this field are the same as those displayed in message EZZ6034I as value for the object variable.
116	74	SMF119TN_ NTLMode	8	EBCDIC	SNA logmode
124	7C	SMF119TN_ NTDevt	20	EBCDIC	Telnet device type
Subtype 21 - Telnet server host name section. This section is optional, and is present if HNGROUP was applicable for this connection.(Offset from beginning of record: SMF119S2Off)
0	0	SMF119TN_ NTHostname	VARIABLE	EBCDIC	Host name associated with this session
Subtype 21 - TN3270E Telnet server round trip performance section. This section is optional and is present when performance data is being collected for this connection as a result of a MONITORGROUP being mapped to this connection.(Offset from beginning of record: SMF119S3Off)
0	0	SMF119TN_ NTRRts	4	Binary	Sum of round trip times for this session in milliseconds
4	4	SMF119TN_ NTRIPRts	4	Binary	Sum of IP portion of round trip times for this session in milliseconds
8	8	SMF119TN_ NTRCountTrans	4	Binary	Count of transactions used to measure round trip times for this session
12	C	SMF119TN_ NTRCountIP	4	Binary	Count of IP transactions used to measure the IP portion of the round trip time
16	10	SMF119TN_ NTRElapsRndTrpSq	8	Binary	The sum of the square of each round trip time
24	18	SMF119TN_ NTRElapsIpRtSq	8	Binary	The sum of the square of each IP portion of round trip time
32	20	SMF119TN_ NTRElapsSnaRtSq	8	Binary	The sum of the square of each SNA portion of round trip time
40	28	SMF119TN_ NTRGrpIndex	4	Binary	The index into the master MonitorGroup table this connection is using
44	2C	SMF119TN_ NTRDR	1	Binary	Indicator how IP trip time is measured: '80'x Definite Response used '40'x Timemark used
45	2D	--	3	Binary	Reserved
Subtype 21 - Telnet SNA session termination time bucket performance data section. This section is optional, and is present if performance data is being collected for this connection as a result of a MONITORGROUP being mapped to this connection and time bucket data has been requested. The upper boundary of one bucket is the lower boundary of the next bucket. A transaction is added to a bucket when its round trip time falls within the bounds of that bucket.(Offset from beginning of record: SMF119S4Off)
0	0	SMF119TN_ NTBucketBndry1	4	Binary	Upper boundary for bucket 1 in milliseconds
4	4	SMF119TN_ NTBucketBndry2	4	Binary	Upper boundary for bucket 2 in milliseconds
8	8	SMF119TN_ NTBucketBndry3	4	Binary	Upper boundary for bucket 3 in milliseconds
12	C	SMF119TN_ NTBucketBndry4	4	Binary	Upper boundary for bucket 4 in milliseconds
16	10	SMF119TN_ NTBucket1Rts	4	Binary	Number of transactions with a round trip time meeting bucket 1 criteria
20	14	SMF119TN_ NTBucket2Rts	4	Binary	Number of transactions with a round trip time meeting bucket 2 criteria
24	18	SMF119TN_ NTBucket3Rts	4	Binary	Number of transactions with round trip time meeting bucket 3 criteria
28	1C	SMF119TN_ NTBucket4Rts	4	Binary	Number of transactions with a round trip time meeting bucket 4 criteria
32	20	SMF119TN_ NTBucket5Rts	4	Binary	Number of transactions with a round trip time that exceeds bucket 4 time

The table above is based on the description provided by IBM in its "MVS Systems Management Facilities (SMF)" manual.

Spectrum SMF Writer - the 4GL SMF Report Writer.

Sample Report from SMF 119 Subtype 2 Records
Showing Information about TCP Connections

The sample SMF report below was created with Spectrum SMF Writer, the low-cost 4GL SMF report writer.

In this report, we read as input the SMF file and select just the type 119 subtype 2 TCP Connection Termination records. (See SMF 119 Subtype 2 record layout.) The report shows information about terminated TCP connections, including start time, end time and computed elapsed time. It also shows the total number of bytes sent and received during the connection and the termination code. Our record layout also expands the 1-byte termination code into a readable descriptive text. The report is grouped by TCP/IP Stack and Resource. The report includes subtotals for each Resource.

All of this with just a few lines of code!
Why not install a Spectrum SMF Writer trial right now and start making your own SMF reports!

These Spectrum SMF Writer Statements:


INPUT:  SMF119 LIST(YES)

INCLUDEIF: SMF119RTY=119 AND SMF119STY=2

COMPUTE: MY_DURATION(2) = #MAKETIME(
               ((#MAKENUM(SMF119AP_TTEDATE) * 86400)
                  + #MAKENUM(SMF119AP_TTETIME))
             - ((#MAKENUM(SMF119AP_TTSDATE) * 86400)
                  + #MAKENUM(SMF119AP_TTSTIME))
                                   )

TITLE: 'Z/OS TCP DAILY CONNECTIONS REPORT'
TITLE: 'SYSTEM:' SMF119TI_SYSNAME
       'SYSPLEX:' SMF119TI_SYSPLEXNAME
       'STACK:' SMF119TI_STACK
TITLE: 'SORTED BY STACK AND RESOURCE NAME'

COLUMNS: SMF119AP_TTRNAME('RESOURCE')
         SMF119AP_TTSDATE('DATE/STARTED')
         SMF119AP_TTSTIME('TIME/STARTED')
         SMF119AP_TTEDATE('DATE/ENDED')
         SMF119AP_TTETIME('TIME/ENDED')
         MY_DURATION('CONNECTION/DURATION/HH:MM:SS.SS' ACCUM
                     TP'ZZ:ZZ:Z9.99')
         SMF119AP_TTINBYTES('INBOUND/BYTES')
         SMF119AP_TTOUTBYTES('OUTBOUND/BYTES')
         SMF119AP_TTTERMCODE(HEX 'TERM/CODE')
         SMF119AP_TTTERMCODE_DESC('TERM CODE DESC')

SORT:    SMF119TI_STACK
         SMF119AP_TTRNAME
         SMF119AP_TTSDATE
         SMF119AP_TTSTIME

BREAK:   SMF119AP_TTRNAME

Produce This SMF Report:


                                              Z/OS TCP DAILY CONNECTIONS REPORT
                                    SYSTEM: ST1      SYSPLEX: SYPROD    STACK: S01QDAS
                                             SORTED BY STACK AND RESOURCE NAME

                                                    CONNECTION
            DATE      TIME       DATE      TIME      DURATION      INBOUND        OUTBOUND    TERM
 RESOURCE STARTED    STARTED    ENDED      ENDED    HH:MM:SS.SS     BYTES          BYTES      CODE     TERM CODE DESC
 ________ ________ ___________ ________ ___________ ___________ ______________ ______________ ____ _______________________

 FTPTA5   03/21/09 14:04:06.81 03/21/09 14:04:07.46        0.65        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 14:05:35.59 03/21/09 14:05:45.67       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA5   03/21/09 14:12:13.81 03/21/09 14:12:14.51        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 14:12:27.35 03/21/09 14:12:37.42       10.07         27,043            329  52  APPL ISSUED CLOSE
 FTPTA5   03/21/09 15:30:34.96 03/21/09 15:30:35.64        0.68        257,537          3,052  61  CLIENT SENT RESET
 FTPTA5   03/21/09 15:35:13.92 03/21/09 15:35:24.00       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA5   (    6 ITEMS)                     32.26        853,740         10,143
 
 FTPTA6   03/21/09 14:05:38.03 03/21/09 14:05:38.70        0.67        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 14:07:23.60 03/21/09 14:07:33.68       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA6   03/21/09 14:12:29.83 03/21/09 14:12:30.50        0.67        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 14:17:10.02 03/21/09 14:17:20.16       10.14         27,043            329  52  APPL ISSUED CLOSE
 FTPTA6   03/21/09 15:35:16.45 03/21/09 15:35:17.21        0.76        257,537          3,052  61  CLIENT SENT RESET
 FTPTA6   03/21/09 15:36:15.10 03/21/09 15:36:25.18       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA6   (    6 ITEMS)                     32.40        853,740         10,143
 
 FTPTA7   03/21/09 14:07:26.16 03/21/09 14:07:26.86        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 14:08:24.36 03/21/09 14:08:34.50       10.14             70            507  52  APPL ISSUED CLOSE
 FTPTA7   03/21/09 14:17:12.60 03/21/09 14:17:13.31        0.71        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 14:21:40.01 03/21/09 14:21:50.08       10.07         27,043            329  52  APPL ISSUED CLOSE
 FTPTA7   03/21/09 15:36:17.53 03/21/09 15:36:18.17        0.64        257,537          3,052  61  CLIENT SENT RESET
 FTPTA7   03/21/09 15:37:11.45 03/21/09 15:37:21.53       10.08         27,043            329  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA7   (    6 ITEMS)                     32.34        826,767         10,321
 
 FTPTA8   03/21/09 08:09:32.96 03/21/09 15:29:02.41  7:19:29.45        274,763         15,912  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 13:17:39.42 03/21/09 14:42:50.82  1:25:11.40         47,498          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:42:57.42 03/21/09 14:43:21.38       23.96         45,921          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:43:26.45 03/21/09 15:28:27.01    45:00.56         47,498          2,291  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:50:01.00 03/21/09 15:28:26.10    38:25.10         35,513          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:51:01.03 03/21/09 14:52:28.82     1:27.79         33,273            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:53:05.50 03/21/09 15:28:22.53    35:17.03         33,273            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:53:51.74 03/21/09 14:55:51.42     1:59.68         35,306          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 14:56:05.98 03/21/09 15:11:31.19    15:25.21         33,066            875  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:12:01.80 03/21/09 15:13:30.66     1:28.86         35,266          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:13:45.48 03/21/09 15:17:09.41     3:23.93         38,223          2,199  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:18:54.59 03/21/09 15:20:07.26     1:12.67         34,273          1,537  52  APPL ISSUED CLOSE
 FTPTA8   03/21/09 15:20:22.01 03/21/09 15:28:20.73     7:58.72         33,118            875  52  APPL ISSUED CLOSE
 *** TOTAL FOR FTPTA8   (   13 ITEMS)               11:16:44.36        726,991         34,632

 
 FTPTA9   03/21/09 14:09:28.52 03/21/09 14:09:29.22        0.70        257,537          3,052  61  CLIENT SENT RESET
 FTPTA9   03/21/09 14:10:24.02 03/21/09 14:10:34.10       10.08         27,043            329  52  APPL ISSUED CLOSE
 FTPTA9   03/21/09 15:01:06.82 03/21/09 15:01:07.46        0.64        257,537          3,052  61  CLIENT SENT RESET
 FTPTA9   03/21/09 15:13:52.13 03/21/09 15:14:02.53       10.40         27,043            329  52  APPL ISSUED CLOSE

 ...

See other sample SMF reports.