FTP server transfer initialization record (subtype 100)

This SMF record is available only from the real-time TCP/IP network monitoring NMI's SMF interface, SYSTCPSM, and is not written to the MVS™ SMF data sets. See Real-time TCP/IP network monitoring NMI for more information about the SYSTCPSM interface.

Table 1 shows the FTP server transfer initialization self-defining section of SMF record.
Table 1. FTP server transfer initialization self-defining section
Offset Name Length Format Description
0 (X'0') Standard SMF header 24 N/A Standard SMF header; subtype is 100 (X'64')
Self-defining section
24 (X'18') SMF119SD_TRN 2 Binary Number of triplets in this record (V1R4: 5, V1R5: 6)
26 (X'1A')   2   Reserved
28 (X'1C') SMF119IDOff 4 Binary Offset to TCP⁄IP identification section. *
32 (X'20') SMF119IDLen 2 Binary Length of TCP⁄IP identification section. *
34 (X'22') SMF119IDNum 2 Binary Number of TCP⁄IP identification sections. *
36 (X'24') SMF119S1Off 4 Binary Offset to FTP server transfer initialization section
40 (X'28') SMF119S1Len 2 Binary Length of FTP server transfer initialization section
42 (X'2A') SMF119S1Num 2 Binary Number of FTP server transfer initialization sections
44 (X'2C') SMF119S2Off 4 Binary Offset to FTP server hostname section
48 (X'30') SMF119S2Len 2 Binary Length of FTP server hostname section
50 (X'32') SMF119S2Num 2 Binary Number of FTP server hostname sections
52 (X'34') SMF119S3Off 4 Binary Offset to FTP server first associated data set name section
56 (X'38') SMF119S3Len 2 Binary Length of FTP server first associated data set name section
58 (X'3A') SMF119S3Num 2 Binary Number of FTP server first associated data set name sections
60 (X'3C') SMF119S4Off 4 Binary Offset to FTP server second associated data set name section
64 (X'40') SMF119S4Len 2 Binary Length of FTP server second associated data set name section
66 (X'42') SMF119S4Num 2 Binary Number of FTP server second associated data set name sections
68 (X'44') SMF119S5Off 4 Binary Offset to FTP server security section (V1R5)
72 (X'48') SMF119S5Len 2 Binary Length of FTP server security section (V1R5)
74 (X'4A') SMF119S5Num 2 Binary Number of FTP server security sections (V1R5)
See Common TCP/IP identification section for the contents of the TCP⁄IP stack identification section.
Table 2 shows the FTP server transfer initialization record section (located physically after the TCP⁄IP identification section in the record). This section is slightly different from the one in the transfer completion record and the field names are therefore different from the completion record. The mapping of this record section is in EZANMFTA (assembler macro) for assembler code and in EZANMFTC (a C header) for C code.
Table 2. FTP server transfer initialization record section
Offset Name Length Description
0 SMF119FT_FSIOPer 1 FTP Operation according to SMF77 subtype classification (this is really redundant information, the same information can be found in SMF119FT_FSICmd).
  • X'01': Append
  • X'02': Delete
  • X'03': Rename
  • X'04': Retrieve
  • X'05': Store
  • X'06': Store Unique
1 SMF119FT_FSIActPas 1 Passive or active mode data connection:
  • X'00' active using default ip and port
  • X'01' active using PORT
  • X'02' active using EPRT
  • X'03' passive using PASV
  • X'04' passive using EPSV
2   2 Reserved
4 SMF119FT_FSICmd 4 FTP command (according to RFC 959+; see Related protocol specifications for information about accessing RFCs)
8 SMF119FT_FSIFType 4 File type (SEQ, JES, or SQL)
12 SMF119FT_FSIDRIP 16 Remote IP address (data connection)
28 SMF119FT_FSIDLIP 16 Local IP address (data connection)
44 SMF119FT_FSIDRPort 2 Remote port number (data connection)
46 SMF119FT_FSIDLPort 2 Local port number (data connection - server)
48 SMF119FT_FSICRIP 16 Remote IP address (control connection)
64 SMF119FT_FSICLIP 16 Local IP address (control connection)
80 SMF119FT_FSICRPort 2 Remote port number (control connection - client)
82 SMF119FT_FSICLPort 2 Local port number (control connection - server)
84 SMF119FT_FSISUser 8 Client user ID on server
92 SMF119FT_FSIFType 1 Data type
  • A: ASCII
  • E: EBCDIC
  • I: Image
  • B: Double-byte
  • U: UCS-2
93 SMF119FT_FSIMode 1 Transmission mode
  • B: Block
  • C: Compressed
  • S: Stream
94 SMF119FT_FSIStruct 1 Data structure
  • F: File
  • R: Record
95 SMF119FT_FSIDsType 1 Data set type
  • S: SEQ
  • P: PDS
  • H: z/OS® UNIX file
96 SMF119FT_FSISTime 4 Data connection start time, formatted in 1/100 seconds since midnight [using Coordinated Universal Time (UTC)]
100 SMF119FT_FSISDate 4 Data connection start date (format: 0cyydddF). If the start date is not available, the value specified is X'0000000F'.
104 SMF119FT_FSICSTime 4 Control connection start time in 1/100 seconds since midnight [using Coordinated Universal Time (UTC)] (FTP session start time)
108 SMF119FT_FSICSDate 4 Control connection start date (format: 0cyydddF). If the end date is not available, the value specified is X'0000000F' (FTP sessions start date)
112 SMF119FT_FSIM1 8 PDS Member name
120 SMF119FT_FSIM2 8 Second PDS member name (if rename operation)
128 SMF119FT_FSICConnID 4 TCP connection ID of FTP control connection (z/OS version V1R8 and later)
132 SMF119FT_FSIDConnID 4 TCP connection ID of FTP data connection, or zero (z/OS version V1R8 and later)
136 SMF119FT_FSISessionID 15 FTP activity logging session ID (z/OS version V1R8 and later)
151 Reserved 1 Reserved (z/OS version V1R8 and later)
Table 3 shows the FTP server hostname section, physically located after the FTP server transfer initialization section. This section is optional and is identical to the one present in the transfer completion record, and is present only if a gethostbyaddr operation was performed for the Local IP address.
Table 3. FTP server hostname section
Offset Name Length Description
0 SMF119FT_FSHostname n Host name
Table 4 shows the name section of the first associated data set in the FTP server transfer initialization record. This section represents the server MVS or z/OS UNIX data set name that is associated with the file transfer or rename operation. Use the Data Set Type field information in the FTP server transfer initialization section to determine the type of file name that this section represents.
Table 4. FTP server transfer initialization record section: First associated data set name
Offset Name Length Format Description
0(X'0') SMF119FT_FSFileName1 n EBCDIC First server MVS or z/OS UNIX file name that is associated with the file transfer or rename operation. If the operation is rename, this is the original name of the file or data set.
Table 5 shows the name section of the second associated data set in the FTP server transfer initialization record. This section represents an MVS or z/OS UNIX data set name that is associated with a rename operation. Use the Data Set Type field information in the FTP server transfer initialization section to determine the type of file name that this section represents.
Table 5. FTP server transfer initialization record section: Second associated data set name
Offset Name Length Format Description
0(X'0') SMF119FT_FSFileName2 n EBCDIC Second MVS or z/OS UNIX file name that is associated with a rename operation. This is the new name of the file or data set.
Table 6 displays the FTP server security section.
Table 6. FTP server security section
Offset Name Length Format Description
0 (X'0') SMF119FT_FSMechanism 1 EBCDIC Protection mechanism
  • N: None
  • T: TLS
  • G: GSSAPI
  • A: AT-TLS
1 (X'1') SMF119FT_FSCProtect 1 EBCDIC Control connection protection level
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
2 (X'2') SMF119FT_FSDProtect 1 EBCDIC Data connection protection level
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
3 (X'3') SMF119FT_FSLoginMech 1 EBCDIC Login method
  • P: Password
  • C: Certificate
  • T: Kerberos ticket
4 (X'4') SMF119FT_FSProtoLevel 8 EBCDIC

Protocol level (present only if Protocol Mechanism is TLS or AT-TLS).

Possible values are:
  • SSLV2
  • SSLV3
  • TLSV1
  • TLSV1.1
  • TLSV1.2
12 (X'C') SMF119FT_FSCipherSpec 20 EBCDIC

Cipher specification (present only if Protocol Mechanism is TLS or AT-TLS).

Possible values when Protocol Level is SSLV2
  • RC4 US
  • RC4 Export
  • RC2 US
  • RC2 Export
  • DES 56-bit
  • Triple-DES US
Possible values when Protocol Level is SSLV3, TLSV1, TLSV1.1, or TLSV1.2:
  • SSL_NULL_MD5
  • SSL_NULL_SHA
  • SSL_RC4_MD5_EX
  • SSL_RC4_MD5
  • SSL_RC4_SHA
  • SSL_RC2_MD5_EX
  • SSL_DES_SHA
  • SSL_3DES_SHA
  • SSL_AES_128_SHA
  • SSL_AES_256_SHA
32 (X'20') SMF119FT_FSProtoBufSize 4 Binary Negotiated protection buffer size
36 (X'24') SMF119FT_FSCipher 2 EBCDIC

Hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS). If the value is 4X, the Cipher Specification must be obtained from the SMF119FT_FSCipher4 field.
38 (X'26') SMF119FT_FSFips140 1 Binary FIPS 140 status
  • X'00': FIPS 140 off
  • X'01': FIPS 140 on
  • X'02': FIPS 140 level 1
  • X'03': FIPS 140 level 2
  • X'04': FIPS 140 level 3
39 (X'27') SMF119FT_FSCipher4 4 EBCDIC Four byte hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).
43(X'2B') SMF119FT_FSSessReuse 1 EBCDIC SSL session reuse:
  • A: Allowed
  • R: Required
44(X'2C') SMF119FT_FSCSSLSessIDLen 2 Binary Length of the SSL session ID of FTP control connection
46(X'2E') SMF119FT_FSCSSLSessID 32 Binary SSL session ID of FTP control connection
78(X'4E') SMF119FT_FSDSSLSessIDLen 2 Binary Length of the SSL session ID of FTP data connection
80(X'50') SMF119FT_FSDSSLSessID 32 Binary SSL session ID of FTP data connection