FTP server transfer completion record (subtype 70)

The FTP server transfer completion record is collected when the z/OS® FTP server completes processing of one of the following FTP file transfer operations: file appending, file deletion, file storage (includes both store and store unique operations), file retrieval, or file renaming. A common format for the record is used for each FTP file transfer operation, so the record contains an indication of which operation was performed.

The first or only record contains the following sections:
  • SMF header
  • Self-defining section with 7 section triplets
  • TCP/IP identification section
  • FTP server transfer completion section
  • (Optional) FTP server transfer completion host name section
  • FTP server transfer completion first associated data set name section
  • (Optional) FTP server transfer completion second associated data set name section
  • FTP server transfer completion security section
  • (Optional) FTP server transfer completion load module name section

Load module transfers

When load module is involved in the transfer operation, multiple FTP server transfer completion records can be created. If the information for a record exceeds 32746 bytes, additional FTP server transfer completion records are created to provide all the information. For load module members associated with the transfer, all the member names that fit in the current record are provided in the current record. Any member names that did not fit in the current record are provided in a subsequent record.

The value in the SMF119TI_Reason field indicates whether the record is complete. If the record is incomplete, it is followed by an additional record or records. The first record includes all the sections while the intermediate and final record includes only the SMF header, Self-defining section, TCP/IP identification section and the load module name section.

The Type 119 FTP server transfer completion record is collected at the same point in file transfer processing as the equivalent Type 118 FTP server SMF records. The Type 118 records used different record subtypes, as opposed to a field within the SMF record information, to represent the different file transfer operations being recorded.

Common TCP/IP identification section considerations

For the FTP server transfer completion record, the common TCP/IP identification section indicates FTPS as the subcomponent and the SMF119TI_Reasons field contains X'48' (event record, more records follow) or X'08' (event record, last record in set) as the record reason. The SMF119TI_ASName is the name of the FTP server address space created to service the logged in user. The SMF119FT_FSSUser field contains the user ID of the user for which the transfer was done. See Table 1 for the contents of the common TCP/IP identification section.

Table 1 shows the FTP server transfer completion record self-defining section:
Table 1. FTP server transfer completion record self-defining section
Offset Name Length Format Description
0(X'0') Standard SMF Header 24   Standard SMF header; subtype is 70(X'46')
Self-defining section
24(X'18') SMF119SD_TRN 2 Binary Number of triplets in this record (6)
26(X'1A')   2 Binary Reserved
28(X'1C') SMF119IDOff 4 Binary Offset to TCP/IP identification section
32(X'20') SMF119IDLen 2 Binary Length of TCP/IP identification section
34(X'22') SMF119IDNum 2 Binary Number of TCP/IP identification sections
36(X'24') SMF119S1Off 4 Binary Offset to FTP server transfer completion section
40(X'28') SMF119S1Len 2 Binary Length of FTP server transfer completion section
42(X'2A') SMF119S1Num 2 Binary Number of FTP server transfer completion sections
44(X'2C') SMF119S2Off 4 Binary Offset to FTP server host name section
48(X'30') SMF119S2Len 2 Binary Length of FTP server host name section
50(X'32') SMF119S2Num 2 Binary Number of FTP server host name sections
52(X'34') SMF119S3Off 4 Binary Offset to FTP server first associated data set name section
56(X'38') SMF119S3Len 2 Binary Length of FTP server first associated data set name section
58(X'3A') SMF119S3Num 2 Binary Number of FTP server first associated data set name sections
60(X'3C') SMF119S4Off 4 Binary Offset to FTP server second associated data set name section
64(X'40') SMF119S4Len 2 Binary Length of FTP server second associated data set name section
66(X'42') SMF119S4Num 2 Binary Number of FTP server second associated data set name sections
68 (X'44') SMF119S5Off 4 Binary Offset to FTP server Security section
72 (X'48') SMF119S5Len 2 Binary Length of FTP server Security section
74 (X'4A') SMF119S5Num 2 Binary Number of FTP server Security sections
76(X'4C') SMF119S6Off 4 Binary Offset to FTP server load module name section
80(X'50') SMF119S6Len 2 Binary Length of FTP server load module name section
82(X'52') SMF119S6Num 2 Binary Number of FTP server load module name sections. There is only 1 server load module name section per record.

Table 2 shows the FTP server transfer completion specific section of this SMF record.

Table 2. FTP server transfer completion record section
Offset Name Length Format Description
0(X'0') SMF119FT_FSOper 1 Binary FTP Operation according to SMF77 subtype classification:
  • X'01': Append
  • X'02': Delete
  • X'03': Rename
  • X'04': Retrieve
  • X'05': Store
  • X'06': Store Unique
1(X'1')   3 Binary Reserved
4(X'4') SMF119FT_FSCmd 4 EBCDIC FTP command (according to RFC 959+)
8(X'8') SMF119FT_FSFType 4 EBCDIC File type (SEQ, JES, or SQL)
12(X'C') SMF119FT_FSDRIP 16 Binary Remote IP address (data connection). This field is 0 for Delete or Rename operation.
28(X'1C') SMF119FT_FSDLIP 16 Binary Local IP address (data connection). This field is 0 for Delete or Rename operation.
44(X'2C') SMF119FT_FSDRPort 2 Binary Remote port number (data connection - client). This field is 0 for Delete or Rename operation.
46(X'2E') SMF119FT_FSDLPort 2 Binary Local port number (data connection - server). This field is 0 for Delete or Rename operation.
48 (X'30') SMF119FT_FSCRIP 16 Binary Remote IP address (control connection)
64(X'40') SMF119FT_FSCLIP 16 Binary Local IP address (control connection)
80 (X'50') SMF119FT_FSCRPort 2 Binary Remote port number (control connection - client)
82 (X'52') SMF119FT_FSCLPort 2 Binary Local port number (control connection - server)
84(X'54') SMF119FT_FSSUser 8 EBCDIC Client User ID on server
92(X'5C') SMF119FT_FSType 1 EBCDIC Data type:
  • A: ASCII
  • E: EBCDIC
  • I: Image
  • B: Double-byte
  • U: UCS-2
93(X'5D') SMF119FT_FSMode 1 EBCDIC Transmission mode:
  • B: Block
  • C: Compressed
  • S: Stream
94(X'5E') SMF119FT_FSStruct 1 EBCDIC Data structure:
  • F: File
  • R: Record
95(X'5F') SMF119FT_FSDsType 1 EBCDIC Data set type:
  • S: SEQ
  • P: PDS
  • H: z/OS UNIX
96(X'60') SMF119FT_FSSTime 4 Binary Transmission start time of day
100(X'64') SMF119FT_FSSDate 4 Packed Transmission start date
104(X'68') SMF119FT_FSETime 4 Binary Transmission end time of day
108(X'6C') SMF119FT_FSEDate 4 Packed Transmission end date
112(X'70') SMF119FT_FSDur 4 Binary File transmission duration in units of 1/100 seconds
116(X'74') SMF119FT_FSBytes 8 Binary Transmission byte count; 64-bit integer
124(X'7C') SMF119FT_FSLReply 4 EBCDIC Last reply to client (3-digit RFC 959 code, right-aligned)
128(X'80') SMF119FT_FSM1 8 EBCDIC PDS Member name
136(X'88') SMF119FT_FSRS 8 EBCDIC Reserved for abnormal end information
144(X'90') SMF119FT_FSM2 8 EBCDIC Second PDS member name (if rename operation)
152(X'98') SMF119FT_FSBytesFloat 8 Floating point hex z/OS floating point format for transmission byte count
160 (X'A0') SMF119FT_FSCConnID 4 Binary TCP connection ID of FTP control connection
164 (X'A4') SMF119FT_FSDConnID 4 Binary TCP connection ID of FTP data connection, or 0. This field is 0 for Delete or Rename operation.
168 (X'A8') SMF119FT_FSSessionID 15 EBCDIC FTP activity logging session ID. The activity logging session ID uniquely identifies the FTP session between a client and a server. The identifier is created by combining the job name of the FTP daemon with a 5-digit number in the range 00000 - 99999.
183 (X'B7')   1 Binary Reserved
Table 3 shows the FTP server transfer completion host name section. This section is optional and is present if gethostbyaddr operation was performed for the local IP address.
Table 3. FTP server transfer completion record section: Host name
Offset Name Length Format Description
0(X'0') SMF119FT_FSHostname n EBCDIC Host Name
Table 4 shows the name section of the first associated data set in the FTP server transfer completion record. This section represents the server MVS™ or z/OS UNIX data set name that is associated with a rename or file transfer. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of file name that this section represents.
Table 4. FTP server transfer completion record section: First associated data set name
Offset Name Length Format Description
0(X'0') SMF119FT_FSFileName1 n EBCDIC Server MVS or z/OS UNIX file name associated with the file transfer or rename operation. When the operation is a rename, this is the file or data set original name.
Table 5 shows the name section of the second associated data set in the FTP server transfer completion record. This section represents an MVS or z/OS UNIX data set name that is associated with the rename operation. Use the Data Set Type field information in the FTP server transfer completion section to determine the type of file name that this section represents.
Table 5. FTP server transfer completion record section: Second associated data set name
Offset Name Length Format Description
0(X'0') SMF119FT_FSFileName2 n EBCDIC Second MVS or z/OS UNIX file name associated with a rename. This is the new file or data set name.
Table 6 shows the FTP server security section:
Table 6. FTP server security section
Offset Name Length Format Description
0 (X'0') SMF119FT_FSMechanism 1 EBCDIC Protection Mechanism:
  • N: None
  • T: TLS
  • G: GSSAPI
  • A: AT-TLS
1 (X'1') SMF119FT_FSCProtect 1 EBCDIC Control connection protection level:
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
2 (X'2') SMF119FT_FSDProtect 1 EBCDIC Data connection Protection Level:
  • N: None
  • C: Clear
  • S: Safe
  • P: Private
3 (X'3') SMF119FT_FSLoginMech 1 EBCDIC Login Method:
  • P: Password
  • C: Certificate
  • T: Kerberos ticket
4 (X'4') SMF119FT_FSProtoLevel 8 EBCDIC

(Control connection.)

Protocol level (present only if Protocol Mechanism is TLS or AT-TLS).

Possible values are:
  • SSLV2
  • SSLV3
  • TLSV1
  • TLSV1.1
  • TLSV1.2
12 (X'C') SMF119FT_FSCipherSpec 20 EBCDIC

(Control connection.)

Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).

Possible values when Protocol Level is SSLV2:
  • RC4 US
  • RC4 Export
  • RC2 US
  • RC2 Export
  • DES 56-Bit
  • Triple DES US
Possible values when Protocol Level is SSLV3, TLSV1, TLSV1.1, or TLSV1.2:
  • SSL_NULL_MD5
  • SSL_NULL_SHA
  • SSL_RC4_MD5_EX
  • SSL_RC4_MD5
  • SSL_RC4_SHA
  • SSL_RC2_MD5_EX
  • SSL_DES_SHA
  • SSL_3DES_SHA
  • SSL_AES_128_SHA
  • SSL_AES_256_SHA

If this field is blank, the value of SMF119FT_FSCipher for the cipher is used for the connection.
32 (X'20') SMF119FT_FSProtoBufSize 4 Binary Negotiated protection buffer size
36(X'24') SMF119FT_FSCipher 2 EBCDIC

(Control connection.)

Hexadecimal value of cipher specification (present only when Protocol Mechanism is TLS or AT-TLS). If the value is 4X, the cipher specification must be obtained from the SMF119FT_FSCipher4 field.
38(X'26') SMF119FT_FSFips140 1 Binary FIPS 140 status
  • X'00': FIPS 140 off
  • X'01': FIPS 140 on
  • X'02': FIPS 140 level 1
  • X'03': FIPS 140 level 2
  • X'04': FIPS 140 level 3
39(X'27') SMF119FT_FSCipher4 4 EBCDIC

(Control connection.)

Four byte hexadecimal value of Cipher Specification (present only if Protocol Mechanism is TLS or AT-TLS).

43(X'2B') SMF119FT_FSSessReuse 1 EBCDIC SSL session reuse:
  • A: Allowed
  • R: Required
44(X'2C') SMF119FT_FSCSSLSessIDLen 2 Binary Length of the SSL session ID of FTP control connection
46(X'2E') SMF119FT_FSCSSLSessID 32 Binary SSL session ID of FTP control connection
78(X'4E') SMF119FT_FSDSSLSessIDLen 2 Binary Length of the SSL session ID of FTP data connection
80(X'50') SMF119FT_FSDSSLSessID 32 Binary SSL session ID of FTP data connection
Table 7 shows the FTP server transfer completion load module name section, physically located after the FTP server security section. This section represents the load module or program object library name and member name associated with this transfer. It's optional and is present only for a load module transfer.
Table 7. FTP client transfer completion load module name section
Offset Name Length Format Description
0(X'0') SMF119FT_FSMemNum 4 Binary Number of members associated with the file transfer operation. The member names begin in field SMF119FT_FSMemName.
4(X'4') SMF119FT_FSLibNameLen 1 Binary Length of the name of the Load module or program object library associated with the file transfer operation
5(X'5') SMF119FT_FSLibName 44 EBCDIC Name of the Load module or program object library associated with the file transfer operation, padded with trailing blanks.
49(X'31') SMF119FT_FSMemName n EBCDIC Names of members associated with the file transfer operation. There is no delimiter between the names of members. Each member name occupies 8 bytes. Name values that are less than 8 bytes in length are padded with trailing blanks.