Thanks Tracy. We’re currently using this in our Jinetd today and I can see the FTP logs. I was trying to capture Telnet too. I didn’t know if it would occur in the same Job and couldn’t find documentation for it.
Donna and Robert Mills have passed some logon CMD/UDC’s I can implement to track my telnet connections I think.
Thanks again everyone.
veritiv.com
RandyStanfield
Senior IT Architect Infrastructure
Carrollton•TX
(972)982-3621
© 2023 Fortune Media IP Limited. Used under license.
This email may contain confidential or privileged information. Unless you are the intended
recipient, delete this email immediately and contact the sender at the address above.
From: Tracy Johnson <[log in to unmask]>
Sent: Wednesday, January 17, 2024 2:48 PM
To: Stanfield, Randy (Carrollton, TX) <[log in to unmask]>; [log in to unmask]
Subject: Re: [HP3000-L] Telnet services Logging
In your jinetd. net job change the run command to read: !run inetd. net. sys;pri=cs;info="-l Attempted connections will appear in the $STDLIST of the job. You won't get disconnections however. And there is no correlation between an attempted connection
In your jinetd.net job change the run command to read:
!run inetd.net.sys;pri=cs;info="-l
Attempted connections will appear in the $STDLIST of the job.
You won't get disconnections however. And there is no correlation
between an attempted connection and a log on. You'd have to compare it
with the console. You definitely get the IP address however.
(One way would be to use MPEX and do a PRINTO;WAIT on the job and have
the CONSOLE to the same window at the same time, that would be active
monitoring.)
For FTP logging put this BEFORE the run command of inetd.net.sys, you
can see where it goes:
!build ftplog.arpa.sys;rec=-256,,f,ascii;disc=4096
But FTP attempts also show up at the CONSOLE with the IP address.
On 1/17/24 14:24, Stanfield, Randy (Carrollton, TX) wrote:
> Does anyone remember if we have a way to LOG the TELNET connections to the HP3000. I don’t want full logging just Initiation connection and IP address and Dissconnect time for the IP address. Similar to what you can get with FTP Logging?
>
> veritiv.com
> RandyStanfield
> Senior IT Architect Infrastructure
> Carrollton•TX
> (972)982-3621
> © 2023 Fortune Media IP Limited. Used under license.
> This email may contain confidential or privileged information. Unless you are the intended
> recipient, delete this email immediately and contact the sender at the address above.
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit https://urldefense.com/v3/__http://raven.utc.edu/archives/hp3000-l.html__;!!BeRq2ZU5pg!qK_g4eQsX34Qr0Shnh3wi-HnMQ8WStjAJ20Vqb93x9oBftEjmOkqvKWLwKFhiS5KSEVox3Anfm4bjarzOI5BC_Tb$<https://urldefense.com/v3/__http:/raven.utc.edu/archives/hp3000-l.html__;!!BeRq2ZU5pg!qK_g4eQsX34Qr0Shnh3wi-HnMQ8WStjAJ20Vqb93x9oBftEjmOkqvKWLwKFhiS5KSEVox3Anfm4bjarzOI5BC_Tb$> *
--
Tracy Johnson
BT
NNNN
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|