FTP client transfer initialization record (subtype 101)

This SMF record is available only from the real-time TCP/IP network monitoring NMI's SMF interface, SYSTCPSM, and is not written to the MVS™ SMF data sets. See Real-time TCP/IP network monitoring NMI for more information about the SYSTCPSM interface.

The following table shows the FTP client transfer initialization self-defining section of the SMF record.
Offset Name Length Format Description
0 (X'0') Standard SMF header 24 N/A Standard SMF header; subtype is 101 (X'65')
Self-defining section
24 (X'18') SMF119SD_TRN 2 Binary Number of triplets in this record (V1R4: 4, V1R5: 5, V1R8: 6)
26 (X'1A')   2   Reserved
28 (X'1C') SMF119IDOff 4 Binary Offset to TCP⁄IP identification section *
32 (X'20') SMF119IDLen 2 Binary Length of TCP⁄IP identification section *
34 (X'22') SMF119IDNum 2 Binary Number of TCP⁄IP identification sections *
36 (X'24') SMF119S1Off 4 Binary Offset to FTP client transfer initialization section
40 (X'28') SMF119S1Len 2 Binary Length of FTP client transfer initialization section
42 (X'2A') SMF119S1Num 2 Binary Number of FTP client transfer initialization sections
44 (X'2C') SMF119S2Off 4 Binary Offset to FTP client associated data set name section
48 (X'30') SMF119S2Len 2 Binary Length of FTP client associated data set name section
50 (X'32') SMF119S2Num 2 Binary Number of FTP client associated data set name sections
52 (X'34') SMF119S3Off 4 Binary Offset to FTP client SOCKS section
56 (X'38') SMF119S3Len 2 Binary Length of FTP client SOCKS section
58 (X'3A') SMF119S3Num 2 Binary Number of FTP client SOCKS sections
60 (X'3C') SMF119S4Off 4 Binary Offset to FTP client security section (z/OS® version V1R5 and later)
64 (X'40') SMF119S4Len 2 Binary Length of FTP client security section (z/OS version V1R5 and later)
66 (X'42') SMF119S4Num 2 Binary Number of FTP client security sections (z/OS version V1R5 and later)
68 (X'44') SMF119S5Off 4 Binary Offset to FTP client user name section (z/OS version V1R8 and later)
72 (X'48') SMF119S5Len 2 Binary Length of FTP client user name section (z/OS version V1R8 and later)
74 (X'4A') SMF119S5Num 2 Binary Number of FTP client user name sections (z/OS version V1R8 and later)
* See Common TCP/IP identification section for the contents of the TCP⁄IP stack identification section.
Table 1 describes the FTP client transfer initialization record section, which is physically located after the TCP⁄IP identification section. This section is slightly different from the one in the transfer completion record and the field names are therefore different from the completion record. The mapping of this record section is in EZANMFTA (assembler macro) for assembler code and in EZANMFTC (a C header) for C code.
Table 1. FTP client transfer initialization record section
Offset Name Length Description
0 SMF119FT_FCICmd 4 FTP subcommand (according to RFC 959; see Related protocol specifications for information about accessing RFCs)
4 SMF119FT_FCIFType 4 Local file type (SEQ or SQL)
8 SMF119FT_FCIDRIP 16 Remote IP address (data connection)
24 SMF119FT_FCIDLIP 16 Local IP address (data connection)
40 SMF119FT_FCIDRPort 2 Remote port number (data connection)
42 SMF119FT_FCIDLPort 2 Local port number (data connection)
44 SMF119FT_FCICRIP 16 Remote IP address (control connection)
60 SMF119FT_FCICLIP 16 Local IP address (control connection)
76 SMF119FT_FCICRPort 2 Remote port number (control connection)
78 SMF119FT_FCICLPort 2 Local port number (control connection)
80 SMF119FT_FCIRUser 8 User ID (login name) on server
88 SMF119FT_FCILUser 8 Local user ID
96 SMF119FT_FCIType 1 Data format
  • A: ASCII
  • E: EBCDIC
  • I: Image
  • B: Double-byte
  • U: UCS-2
97 SMF119FT_FCIMode 1 Transfer mode
  • B: Block
  • C: Compressed
  • S: Stream
98 SMF119FT_FCIStruct 1 Structure
  • F: File
  • R: Record
99 SMF119FT_FCIDSType 1 Data set type
  • S: SEQ
  • P: PDS
  • H: z/OS UNIX file system
100 SMF119FT_FCISTime 4 Start time of data connection, in a hundreth of a second, since midnight [using Coordinated Universal Time (UTC)]
104 SMF119FT_FCISDate 4 Start date of data connection (format: 0cyydddF). If the start date is not available, the value specified is X'0000000F'.
108 SMF119FT_FCICSTime 4 Start time of control connection, in a hundreth of a second, since midnight [using Coordinated Universal Time (UTC)]. FTP session start time.
112 SMF119FT_FCICSSDate 4 Start date of the control connection (format 0cyydddF). If the start date is not available, the value specified is X'0000000F'. FTP session start date.
116 SMF119FT_FCIM1 8 PDS member name
124 SMF119FT_FCIActPas 1 Passive or active mode data connection. Possible values are:
  • X'00': Active using default IP and port
  • X'01': Active using PORT
  • X'03': Passive using PASV
  • X'04': Passive using EPSV
125 Reserved 3 Reserved
128 SMF119FT_FCICConnID 4 TCP connection ID of FTP control connection (z/OS version V1R8 and later)
132 SMF119FT_FCIDConnID 4 TCP connection ID of FTP data connection (z/OS version V1R8 and later)
Table 2 describes the FTP client associated data set name section, which is physically located after the FTP client transfer initialization section. This section is identical to the one present in the transfer completion record.
Table 2. FTP client associated data set name section
Offset Name Length Description
0 SMF119FT_FCFileName n MVS data set or z/OS UNIX file name associated with a file transfer operation. Use the data set type field information in the FTP client transfer initialization section to determine the type of file name that is represented by this value.
Table 3 describes the FTP client SOCKS section, which is present only if the connection passes through a SOCKS server.
Table 3. FTP client SOCKS section
Offset Name Length Description
0 SMF119FT_FCCIP 16 SOCKS server IP address
16 SMF119FT_FCCPort 2 SOCKS server port number
18 SMF119FT_FCCProt 1 SOCKS protocol version. Possible values are:
  • X'01': SOCKS Version 4
  • X'02': SOCKS Version 5
Table 4 describes the FTP client security section.
Table 4. FTP client security section
Offset Name Length Format Description
0 (X'0') SMF119FT_FCMechanism 1 EBCDIC Protection mechanism. Possible values are:
  • N: None
  • T: TLS
  • G: GSSAPI
  • A: AT-TLS
1 (X'1') SMF119FT_FCCProtect 1 EBCDIC Control connection protection level. Possible values are:
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
2 (X'2') SMF119FT_FCDProtect 1 EBCDIC Data connection protection level. Possible values are:
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
3 (X'3') SMF119FT_FCLoginMech 1 EBCDIC Login method. Possible values are:
  • U: Undefined; the login method is not defined for the client.
  • P: Password
  • C: Certificate
4 (X'4') SMF119FT_FCProtoLevel 8 EBCDIC Protocol level (present only if Protocol Mechanism is TLS or AT-TLS). Possible values are:
  • SSLV2
  • SSLV3
  • TLSV1
  • TLSV1.1
  • TLSV1.2
12 (X'C') SMF119FT_FCCipherSpec 20 EBCDIC Cipher specification (present only if Protocol Mechanism is TLS or AT-TLS). Possible values when Protocol Level is SSLV2 are:
  • RC4 US
  • RC4 Export
  • RC2 US
  • RC2 Export
  • DES 56-bit
  • Triple-DES US
Possible values when Protocol Level is SSLV3, TLSV1, TLSV1.1, or TLSV1.2 are:
  • SSL_NULL_MD5
  • SSL_NULL_SHA
  • SSL_RC4_MD5_EX
  • SSL_RC4_MD5
  • SSL_RC4_SHA
  • SSL_RC2_MD5_EX
  • SSL_DES_SHA
  • SSL_3DES_SHA
  • SSL_AES_128_SHA
  • SSL_AES_256_SHA
32 (X'20') SMF119FT_FCProtBuffSize 4 Binary Negotiated protection buffer size
36 (X'24') SMF119FT_FCCipher 2 EBCDIC Hexadecimal value of the Cipher Specification (present only if the Protocol Mechanism value is TLS or AT-TLS). If the value is 4X, the Cipher Specification must be obtained from the SMF119FT_FCCipher4 field.
38 (X'26') SMF119FT_FCFips140 1 Binary FIPS 140 status
  • X'00': FIPS 140 off
  • X'01': FIPS 140 on
  • X'02': FIPS 140 level 1
  • X'03': FIPS 140 level 2
  • X'04': FIPS 140 level 3
39 (X'27') SMF119FT_FCCipher4 4 EBCDIC Four byte hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).
43(X'2B') SMF119FT_FCSessReuse 1 EBCDIC SSL session reuse:
  • N: None
  • A: Allowed
  • R: Required
44(X'2C') SMF119FT_FCCSSLSessIDLen 2 Binary Length of the SSL session ID of FTP control connection
46(X'2E') SMF119FT_FCCSSLSessID 32 Binary SSL session ID of FTP control connection
78(X'4E') SMF119FT_FCDSSLSessIDLen 2 Binary Length of the SSL session ID of FTP data connection
80(X'50') SMF119FT_FCDSSLSessID 32 Binary SSL session ID of FTP data connection

Table 5 describes the FTP client user name section.

Table 5. FTP client user name section
Offset Name Length Format Description
0(X'0') SMF119FT_FCIXUserID n EBCDIC User name or user ID used to log in to the FTP server.