SMF 119 TCP connection termination record (subtype 2) enhanced to provide IP filter information

z/OS® V2R3 Communications Server provides IP filter information in the SMF 119 TCP connection termination record (subtype 2). The name of the IP filter rules associated with inbound and outbound traffic for a connection are included in a new section of the record, if IP filtering is being done for a connection.

The data is also available through the SYSTCPCN real-time network monitoring interface (NMI).

Restrictions:

The IP filter section is included if IP filtering is active and an IP filter rule applies to the traffic. The IP filter section is not included for intra-host connections because IP filtering is not done for those connections.

The filter rule information reflects the IP filter rules in place at the time that the connection is terminated. If IP filter policy changes while a connection is active, only the names of the IP filter rules in place at the time of the termination are included.

Dependency:

SMF configuration option TCPTERM must be configured on the SMFCONFIG TCP/IP profile statement for the SMF 119 TCP connection termination record (subtype 2) to be generated.

The TCPCONNSERVICE parameter must be configured on the NETMONITOR TCP/IP profile statement for the SMF 119 TCP connection termination data to be available through the SYSTCPCN real-time NMI interface.

Using SMF 119 TCP connection termination record (subtype 2) enhanced to provide IP filter information

To use SMF 119 TCP connection termination record (subtype 2), perform the appropriate tasks in Table 1.

Table 1. SMF 119 TCP connection termination record (subtype 2) enhanced to provide IP filter information
Task/Procedure	Reference
Enable the recording of SMF 119 TCP connection termination records by specifying the TCPTERM option on the SMFCONFIG TCP/IP profile statement.	SMFCONFIG statement in z/OS Communications Server: IP Configuration Reference
Enable the recording of the SMF 119 TCP connection termination data to the SYSTCPCN real-time NMI interface by specifying the TCPCONNSERVICE parameter on the NETMONITOR TCP/IP profile statement.	NETMONITOR statement in z/OS Communications Server: IP Configuration Reference
Display SMFCONFIG and NETMONITOR settings by issuing the Netstat CONFIG/-f command.	Netstat CONFIG/-f report in z/OS Communications Server: IP System Administrator's Commands

To find all related topics about SMF 119 TCP connection termination record (subtype 2) enhancement to provide IP filter information, see Table 2.

Table 2. All related topics about SMF 119 TCP connection termination record (subtype 2) enhanced to provide IP filter information
Book name	Topics
z/OS Communications Server: IP Configuration Reference	SMFCONFIG statement NETMONITOR statement
z/OS Communications Server: IP System Administrator's Commands	Netstat CONFIG/-f report
z/OS Communications Server: IP Programmer's Guide and Reference	TCP connection termination record (subtype 2)