Question & Answer
Question
Why is the source program (sproc) not being collected by Guardium and instead recording it as unknown?
Cause
The database itself is sending the value of 'unknown' as seen in the packet example below:
STAP/KTAP TIME: 1580329618718259 < STAP_FLAGS = 33554433 > < SESSION_KEY = 1307272384 > Packet 50072 FROM 122.xx.xx.119 48766 TO 122.xx.xx.156 9997 Packet length: 512 2 0 10 00000000 : 02 00 02 00 00 00 00 00 75 73 76 78 62 74 66 64 ........usvxbtfd 00000010 : 73 70 30 31 2e 73 64 69 2e 63 6f 72 70 2e 62 61 sp01.xxx.xxxx.xx 00000020 : 6e 6b 6f 66 61 6d 1e 74 73 64 62 5f 6c 6f 61 64 xxxxx.xxxx_xxxx 00000030 : 65 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 xx.............. 00000040 : 00 00 00 00 00 0b 00 00 00 00 00 00 00 00 00 00 ................ 00000050 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 : 00 00 00 00 00 31 36 34 35 36 00 00 00 00 00 00 .....16456...... 00000070 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000080 : 00 00 00 05 02 00 06 04 08 01 00 00 00 00 00 02 ................ 00000090 : 00 00 00 00 75 6e 6b 6e 6f 77 6e 00 00 00 00 00 ....unknown..... 000000a0 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000b0 : 00 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000c0 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000d0 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000e0 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Answer
Guardium cannot log the source program (sproc) due to the database server not sending the information as seen in the example above.
Related Information
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCJM6A","label":"IBM Security Guardium S-TAP for IMS on z\/OS"},"Component":"SEIM","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
22 December 2020
UID
ibm16091066