Go to Home Page
Questions?
Call 1-800-572-5517
 
  Go to Home Page  
  See all products
  See price schedules
  See manuals, tutorials, articles
  Download a free 30-day trial
  See user testimonials
  About Pacific Systems Group
 
 
SMF Tools
  See SMF Record Layouts
  See Sample SMF Reports
  Learn How to Export SMF Data
  Download Free SMF Reporting Software (30 days)
 
One of the greatest SMF record parsing programming languages I've ever seen. Chief, Large Systems Services Branch, NIH
  Choose Spectrum Writer to add 4GL to your product
  Free 60-Page Book (PDF) - How to Make an SMF Report
Spectrum DCOLLECT Reporter - the 4GL DCOLLECT Report Writer.

Spectrum SMF Writer - the 4GL SMF Report Writer.

SMF Type 92 Record

This table shows the record layout for type 92 SMF records
(File System Activity).

List of other SMF record layouts available.
List of sample SMF reports.

Purpose: SMF record type 92 reports activity of mounted file systems and files. For more information about SMF record type 92, see IBM's z/OS UNIX System Services Planning.

Rules:

  • To collect information about the activity of a mounted file system, you must be collecting SMF type 92 subtype 5 (unmount) records at the time the file system is mounted and at the time the file system is unmounted.
  • To collect information on the activity of a specific file, you must be collecting SMF type 92 subtype 11 (close) records at the time the file is opened and at the time the file is closed.

The subtypes are:

  • Subtype 1 — contains information written when a file system is mounted.
  • Subtype 2 — contains information written after the file system is quiesced (or “suspended”).
  • Subtype 4 — contains information written after the file system is unquiesced (or “resumed”).
  • Subtype 5 — contains information written when the file system is unmounted.
  • Subtype 6 — contains information written when the file system is remounted.
  • Subtype 7 — contains information written when the file system is moved.
  • Subtype 10 — contains information written when a file is opened.
  • Subtype 11 — contains information written when a file is closed.
  • Subtype 12 — contains MMAP subtype information.
  • Subtype 13 — contains MUNMAP subtype information.
  • Subtype 14 — contains information written when a file or file directory is deleted or renamed.
  • Subtype 15 — contains information written when a file’s security attributes for APF authorized, program control, or shared library are changed.
  • Subtype 16 — contains information written when a socket or character special file is closed.
  • Subtype 17 — contains information about how many times a file is accessed throughout the life of an open and is written on the SMF global recording interval.

It's easy to report on SMF 92 data!

SMF Spectrum Writer
We have a low-cost 4GL report writer especially for SMF files. It's called Spectrum SMF Writer.

Spectrum SMF Writer handles the difficult SMF record parsing for you automatically. You just specify which fields you want to see.

Spectrum SMF Writer also converts the arcane date and time fields and reformats them into an attractive report.

Plus, Spectrum SMF Writer can export SMF data as comma delimited files to use on your PC.
 
Try It FREE Now!

SMF Type 92 Record -- File System Activity
Offset
(Dec.)		Offset
(Hex)		NameLengthFormatDescription
00SMF92LEN2binary
Record Length.
22SMF92SEG2binary
Segment descriptor.
44SMF92FLG1binary
Header flag byte.
Bit- Meaning When Set
0 Subsystem identification follows system identification
1 Subtypes used
2 Reserved
3-6 Version Indicators
7 Reserved
55SMF92RTY1binary
Record type: 92 (X'5C').
66SMF92TME4binary
Time since midnight, in hundredths of a second, that the record was moved into the SMF buffer.
10ASMF92DTE4packed
Date when record was written.
14ESMF92SID4EBCDIC
System identification (from the SID parameter).
1812SMF92WID4EBCDIC
Subsystem identification.
2216SMF92STP2binary
Record subtype.
2418--2binary
Reserved.
261ASMF92SDL2binary
Length of self-defining section.
Self Defining Section
281CSMF92SOF4binary
Offset to subsystem section.
3220SMF92SLN2binary
Length of subsystem section.
3422SMF92SON2binary
Number of subsystem sections.
3624SMF92IOF4binary
Offset of identification section.
4028SMF92ILN2binary
Length of identification section.
422ASMF92ION2binary
Number of identification sections.
442CSMF92DOF4binary
Offset of data section.
4830SMF92DLN2binary
Length of data section.
5032SMF92DON2binary
Number of data sections.
Subsystem Section
(Offset from beginning of record: SMF92SON)
00SMF92TYP2binary
Subtype identification
Value Meaning
1 File system mount
2 File system quiesce
4 File system unquiesce
5 File system unmount
6 File system remount
7 File system move
10 File open
11 File close
12 MMAP
14 MUNMAP
22SMF92RVN2EBCDIC
Record version number.
Value Meaning
1 OpenEdition MVS with MVS/ESA SP 4.3
2 OpenEdition MVS with MVS/ESA SP 5.1 and later
44SMF92PNM8EBCDIC
Product name ().
12CSMF92OSL8EBCDIC
MVS product level.
Identification Section
(Offset from beginning of record: SMF92IOF)
00SMF92JBN8EBCDIC
Job name.
88SMF92RST4binary
Reader start time.
12CSMF92RSD4packed
Reader start date.
1610SMF92STM8EBCDIC
Step name.
2418SMF92RGD8EBCDIC
SAF Group ID.
3220SMF92RUD8EBCDIC
SAF User ID.
4028SMF92UID4binary
mreal user ID.
442CSMF92GID4binary
z/OS UNIX System Services real group ID.
4830SMF92PID4binary
z/OS UNIX System Services process ID.
5234SMF92PGD4binary
z/OS UNIX System Services process group ID.
5638SMF92SSD4binary
z/OS UNIX System Services session ID.
603CSMF92API4binary
z/OS UNIX System Services anchor process ID.
6440SMF92APG4binary
z/OS UNIX System Services anchor process group ID.
6844SMF92ASG4binary
z/OS UNIX System Services anchor session ID.
Subtype 1 — contains information written when a file system is mounted.
(Offset from beginning of record: SMF92DOF)
00SMF92MTM8binary
Time of mount, STCK format.
88SMF92MPF4binary
Offset of path section.
12CSMF92MFT4binary
File system type from MntEntFSType field of BPXYMNTE.
1610SMF92MFM4binary
File system mode from MntEntFSMode field of BPXYMNTE.
2014SMF92MDN4binary
File system device number from MntEntFSDev field of BPXYMNTE.
2418SMF92MDD8EBCDIC
DDNAME specified on mount from MntEntFSDDName field of BPXYMNTE.
3220SMF92MTN8EBCDIC
File system type name from MntEntFSTName field of BPXYMNTE.
4028SMF92MFN44EBCDIC
File system name from MntEntFSName field of BPXYMNTE.
8454SMF92MBL4binary
File system block size.
8858SMF92MST8binary
Total space in file system in block size units.
9660SMF92MSU8binary
Allocated space in file system in block size units.
10468SMF92MFG1binary
Flag byte
Bit- Meaning When Set
0 File system mounted by automounter (SMF92MAU)
1 File system mounted asynchronously (SMF92MAS)
10569SMF92MF21binary
Second flag byte
Bit- Meaning When Set
0 File system mounted locally (SMF92MLU)
1 File system mounted remotely (SMF92MNU)
2 Sysplex client (SMF92MDO)
3 File system owner (SMF92MSN)
Subtype 1 - Path Section
(Offset from beginning of record: SMF92DOF)
00SMF92PPL2binary
Length of pathname for directory.
22SMF92PPNvariableEBCDIC
Pathname of directory where file system is mounted.
Subtype 2 — contains information written after the file system is quiesced (or “suspended”).
(Offset from beginning of record: SMF92DOF)
00SMF92STS8binary
Time of suspend, STCK format.
88SMF92SFT4binary
File system type from MntEntFSType field of BPXYMNTE.
12CSMF92SFM4binary
File system mode from MntEntFSMode field of BPXYMNTE.
1610SMF92SDN4binary
File system device number from MntEntFSDev field of BPXYMNTE.
2014SMF92SDD8EBCDIC
DDNAME specified on mount from MntEntFSDDName field of BPXYMNTE.
281CSMF92STN8EBCDIC
File system type name from MntEntFSTName field of BPXYMNTE.
3624SMF92SFN44EBCDIC
File system name from MntEntFSName field of BPXYMNTE.
8050SMF92SFG1binary
Flag byte
Bit- Meaning When Set
0 File system mounted locally (SMF92SLU)
1 File system mounted remotely (SMF92SNU)
2 Sysplex client (SMF92SDO)
3 File system owner (SMF92SSN)
Subtype 4 — contains information written after the file system is unquiesced (or “resumed”).
(Offset from beginning of record: SMF92DOF)
00SMF92RTS8binary
Time of suspend, STCK format.
88SMF92RTR8binary
Time of resume, STCK format.
1610SMF92RFT4binary
File system type from MntEntFSType field of BPXYMNTE.
2014SMF92RFM4binary
File system mode from MntEntFSMode field of BPXYMNTE
2418SMF92RDN4binary
File system device number from MntEntFSDev field of BPXYMNTE.
281CSMF92RDD8EBCDIC
DDNAME specified on mount from MntEntFSDDName field of BPXYMNTE.
3624SMF92RTN8EBCDIC
File system type name from MntEntFSTName field of BPXYMNTE.
442CSMF92RFN44EBCDIC
File system name from MntEntFSName field of BPXYMNTE.
8858SMF92RFG1binary
Flag byte
Bit- Meaning When Set
0 File system mounted locally (SMF92RLU)
1 File system mounted remotely (SMF92RNU)
2 Sysplex client (SMF92RDO)
3 File system owner (SMF92RSN)
Subtype 5 & 6 — contain information written when the file system is unmounted (subtype 5) or remounted (subtype 6).
(Offset from beginning of record: SMF92DOF)
00SMF92UTM8binary
Time of mount, STCK format.
88SMF92UTU8binary
Time of unmount, STCK format.
1610SMF92UFT4binary
File system type from MntEntFSType field of BPXYMNTE.
2014SMF92UFM4binary
File system mode from MntEntFSMode field of BPXYMNTE.
2418SMF92UDN4binary
File system device number from MntEntFSDev field of BPXYMNTE.
281CSMF92UDD8EBCDIC
DDNAME specified on mount from MntEntFSDDName field of BPXYMNTE.
3624SMF92UTN8EBCDIC
File system type name from MntEntFSTName field of BPXYMNTE.
442CSMF92UFN44EBCDIC
File system name from MntEntFSName field of BPXYMNTE.
8858SMF92UBL4binary
File system block size.
925CSMF92UST8binary
Total space in file system in block size units.
10064SMF92USU8binary
Allocated space in file system in block size units.
1086CSMF92USR4binary
Read calls issued to the mounted file system.
11270SMF92USW4binary
Write calls issued to the mounted file system.
11674SMF92UDI4binary
Directory I/O blocks.
12078SMF92UIR4binary
I/O blocks read.
1247CSMF92UIW4binary
I/O blocks written
12880SMF92UBR8binary
Bytes read.
13688SMF92UBW8binary
Bytes written.
14490SMF92UFG1binary
Flag byte
Bit- Meaning When Set
0 File system unmounted by automounter (SMF92MAU)
14591SMF92UF21binary
Second flag byte
Bit- Meaning When Set
0 File system mounted locally (SMF92ULU)
1 File system mounted remotely (SMF92UNU)
2 Sysplex client (SMF92UDO)
3 File system owner (SMF92USN)
Subtype 7 — contains information written when the file system is moved.
(Offset from beginning of record: SMF92DOF)
00SMF92VTV8binary
Time of move, STCK format.
88SMF92VTM8binary
Time of mount, STCK format.
1610SMF92VFT4binary
File system type from MntEntFSType field of BPXYMNTE.
2014SMF92VFM4binary
File system mode from MntEntFSMode field of BPXYMNTE.
2418SMF92VDN4binary
File system device number from MntEntFSDev field of BPXYMNTE.
281CSMF92VDD8EBCDIC
DDNAME specified on mount from MntEntFSDDName field of BPXYMNTE.
3624SMF92VTN8EBCDIC
File system type name from MntEntFSTName field of BPXYMNTE.
442CSMF92VNM44EBCDIC
File system name from MntEntFSName field of BPXYMNTE.
8858SMF92VBL4binary
File system block size.
925CSMF92VST8binary
Total space in file system in block size units.
10064SMF92VSU8binary
Allocated space in file system in block size units.
1086CSMF92VSR4binary
Read calls issued to the mounted file system.
11270SMF92VSW4binary
Write calls issued to the mounted file system.
11674SMF92VDI4binary
Directory I/O blocks.
12078SMF92VIR4binary
I/O blocks read.
1247CSMF92VIW4binary
I/O blocks written
13284SMF92VBR8binary
Bytes read.
1408CSMF92VBW8binary
Bytes written.
14894SMF92VFG1binary
Flag byte (reason for move)
Bit- Meaning When Set
0 User-initiated (SMF92VUI)
1 Recovery (SMF92VRI)
14995SMF92VOF1binary
Flag byte (old status)
Bit- Meaning When Set
0 File system mounted locally (SMF92VOL)
1 File system mounted remotely (SMF92VON)
2 Sysplex client (SMF92VOD)
3 File system owner (SMF92VOS)
15096SMF92VNF1binary
Flag byte (old status)
Bit- Meaning When Set
0 File system mounted locally (SMF92VOL)
1 File system mounted remotely (SMF92VON)
2 Sysplex client (SMF92VOD)
4 File system owner (SMF92VOS)
Subtype 10 — contains information written when a file is opened.
(Offset from beginning of record: SMF92DOF)
00SMF92OTO8binary
Time of open, STCK format.
88SMF92OTY1binary
File type as defined in BPXYFTYP.
99SMF92OFG1binary
Record flag byte.
Bit- Meaning When Set
0 Generated by vnode interface service
1 Network socket (0 indicates UNIX domain socket)
2 Client socket (0 indicates server socket)
10A--2EBCDIC
Reserved.
12CSMF92OTK4binary
Open file token (matches token in close data section)
1610SMF92OIN4binary
File serial number.
2014SMF92ODN4binary
Unique device number for the file.
Subtype 11 — contains information written when a file is closed.
(Offset from beginning of record: SMF92DOF)
00SMF92CTO8binary
Time of open, STCK format.
88SMF92CTC8binary
Time of close, STCK format.
1610SMF92CTY1binary
File type as defined in BPXYFTYP.
1711SMF92CFG1binary
Record flag byte.
Bit- Meaning When Set
0 Generated by vnode interface service
1 Network socket (0 indicates UNIX domain socket)
2 Client socket (0 indicates server socket)
3 File was cached
4 File had Deny Read set on it.
5 File had Deny Write set on it.
1812--2EBCDIC
Reserved.
2014SMF92CTK4binary
Open file token.
2418SMF92CIN4binary
File serial number.
281CSMF92CDN4binary
Unique device number for the file.
3220SMF92CSR4binary
Read calls issued to the file.
3624SMF92CSW4binary
Write calls issued to the file.
4028SMF92CDI4binary
Directory I/O blocks.
442CSMF92CIR4binary
I/O blocks read.
4830SMF92CIW4binary
I/O blocks written.
5234SMF92CBR8binary
Bytes read.
603CSMF92CBW8binary
Bytes written.
6844SMF92CPN64EBCDIC
The pathname used at open time, if known. If the name is 64 characters or longer, the last 64 characters of the name. The name is left-justified and padded with blanks. This field is not always present.
Subtype 12 — contains MMAP subtype information.
(Offset from beginning of record: SMF92DOF)
00SMF92MTO8binary
Time of mmap, STCK format.
88SMF92MSZ4binary
Number of bytes being memory mapped.
120CSMF92MTK4binary
mmap file token (matches token in munmap data section).
1610SMF92MIN4binary
File serial number.
2014SMF92MMDN4binary
File unique device number
Subtype 13 — contains MUNMAP subtype information.
(Offset from beginning of record: SMF92DOF)
00SMF92MUTO8binary
Time of mmap, STCK format.
88SMF92MUTC8binary
Time of munmap, STCK format.
1610SMF92MUSZ4binary
Number of bytes being memory mapped.
2014SMF92MUTK4binary
mmap file token (matches token in mmap data section).
2418SMF92MUIN4binary
File serial number.
281CSMF92MUDN4binary
File unique device number.
3220SMF92MUIR4binary
I/O blocks read.
3624SMF92MUIW4binary
I/O blocks written.
Subtype 14 — contains information written when a file or file directory is deleted or renamed.
(Offset from beginning of record: SMF92DOF)
00SMF92DFT8binary
Time of delete, STCK format.
88SMF92DTY1binary
File type as defined in BPXYFTYP.
99SMF92DFLG1Binary
Bit Flags.
10A--2Binary
Reserved.
12CSMF92DIN4binary
File serial number.
1610SMF92DINP4binary
File serial number of parent.
2014SMF92DDN4binary
Unique device number for the file.
2418SMF92DFS44EBCDIC
File system name.
6844SMF92DNL4binary
Length of file name for delete.
7248SMF92DFN64EBCDIC
Name of file that was deleted or renamed.
13688SMF92DNLR4Binary
Length of new name of file that was renamed.
1408CSMF92DFNR64EBCDIC
New name of file that was renamed.
Subtype 15 — contains information written when a file’s security attributes for APF authorized, program control, or shared library are changed.
(Offset from beginning of record: SMF92DOF)
00SMF92ACT8binary
Time of change, STCK format.
88SMF92ATY1binary
File type as defined in BPXYFTYP.
99SMF92AFLG1binary
Flags.
100A--2binary
Reserved.
120CSMF92AIN4binary
File Ino number.
1610SMF92ADN4binary
File system device number for the file.
2014SMF92AFS44EBCDIC
File system name.
6440SMF92AOLDGENVAL4binary
File’s original generated values, which are the same as the values of st_GenValue from BPXYSTAT.
6743SMF92AOLDGENVALSECBYTE3binary
Record flag byte.
Bit- Meaning When Set
0-2 Reserved.
3 Shared library.
4 Reserved.
5 Program is APF authorized.
6 Program controlled.
7 Reserved.
6844SMF92AOLDSECATTRSC4EBCDIC
File’s original security flags in character form: A, P, S.
6844SMF92AOLDATTRCHAR1EBCDIC
The ’>’ delimiter.
6945SMF92AOLDSHRLIBC1EBCDIC
The value is S if shared library was on.
7046SMF92AOLDAPFAUTHC1EBCDIC
The value is A if APF authorized was on.
7147SMF92AOLDPGMCTLC1EBCDIC
The value is P if program controlled was on.
7248SMF92ANEWGENVAL4binary
New generated values after the change, which are the same as the values of st_GenValue from BPXYSTAT.
754BSMF92ANEWGENVALSECBYTE1binary
Record flag byte.
Bit- Meaning When Set
0-2 Reserved.
3 Shared library.
4 Reserved.
5 Program is APF authorized.
6 Program controlled.
7 Reserved.
764CSMF92ANEWSECATTRSC4EBCDIC
File’s new security flags in character form: A, P, S.
764CSMF92ANEWATTRCHAR1EBCDIC
The ’>’ delimiter.
774DSMF92ANEWSHRLIBC1EBCDIC
The value is S if shared library is on.
784ESMF92ANEWAPFAUTHC1EBCDIC
The value is A if APF authorized is on.
794FSMF92ANEWPGMCTLC1EBCDIC
The value is P if Program controlled is on.
8050SMF92AOWNUID4binary
File owner user ID.
8454SMF92AOWNGID4binary
File owner GID.
8858SMF92ASECLABEL8EBCDIC
File security label.
9660SMF92AAUDITFID16EBCDIC
RACF’s file ID, which is the same as the XXXX_FILE_ID in the various RACF SMF type 80 audit records.
11270--20EBCDIC
Reserved.
13284SMF92ACWDRC4binary
Error return code from getcwd.
13688SMF92ACWDRSN4binary
Error return code from getcwd. If the full path name of the file could not be determined, these fields contain the return and reason codes of the error. In this case, the SMF92APN field will contain the relative path name as entered by the user. SMF92APN is a full path name if SMF92ACWDRC=0.
1408CSMF92APNL4binary
The length of the file path name.
14490SMF92APN1024EBCDIC
The file path name that is the absolute path name as entered by the user or the getcwd() value for the current working directory that is concatenated with the relative name that was entered by the user.
Subtype 16 — contains information written when a socket or character special file is closed.
(Offset from beginning of record: SMF92DOF)
00SMF92SUB168binary
reserved
Subtype 17 — contains information about how many times a file is accessed throughout the life of an open and is written on the SMF global recording interval.
00SMF92FAWT8BINARY
This can be the time when the internal file control block is released. If SMF92FAIT is on, denotes SMF interval time.
88SMF92FAFG1binary
Record flag byte.
Bit - Meaning When Set
0 - SMF92FAWT is SMF interval time.
99--3EBCDIC
Reserved.
120CSMF92FAIN4binary
Inode number.
1610SMF92ADN4binary
Unique device number.
2014SMF92FATI4binary
Total accesses to file during interval.
2418SMF92FAPN64EBCDIC
Path name, if known.

The table above is based on the description provided by IBM in its "MVS Systems Management Facilities (SMF)" manual.

Copyright 2024.
Pacific Systems Group.
All rights reserved.


Spectrum Writer 4GL - the economical alternative to SAS, Easytrieve, DYL-280...

Home | Products | Prices | Documentation | 30-Day Trials | Customer Reviews | Company | FAQ | Sample Reports | SMF Records
Send Your Comments or Questions