Why do connection events show delayed timing in Netmaster IPHISTORY?
Article ID: 129659
Updated On:
Products
CMDB for z/OS
NetSpy Network Performance
NetMaster Network Automation
SOLVE
NetMaster Network Management for SNA
NetMaster Network Management for TCP/IP
NetMaster File Transfer Management
Issue/Introduction
When looking at the IP History on one system, the connection events timestamp in the list is different (later) than the time for the event itself.
Example: Browse Browse Connection and Event Details.
Then List all Connection events
The list shows
Type Cmnd Time Date Sec? Jobname Userid Application Name
CN TERM 10:16:37 08-FEB-2019 NO CICSSY1 OTHER
and when you select it..
Connection Details
Connection Started ....... 08-FEB-2019 08:10:12
Connection Ended ......... 08-FEB-2019 08:10:17
User (if known) ..........
It's more than 2 hrs delayed.
Environment
Release: SLOPFC00200-12.1-NetMaster-File Transfer Management
Component:
Component:
Resolution
This is working as designed, and the HELP for this indicates this to be the case. Please review the online HELP.
As seen below, the TIME is specified as the time when the record was written to the database. There are various factors that could contribute to having the times being different - thus these time frames represent two different values and are not the same thing. The TIME on the first panel is the TIME record was written, the times within the specific record comes straight from SMF and indicate the time the connection started and ended.
Fields
Type identifies the source of the record:
CN : TCP Connection event
Cmnd is the command, subcommand, or action performed:
INIT : Start connection
TERM : End connection
Time is the time the record was written to the events
database.
Date is the date the record was written to the events
database.
Also, if you PF11 and go to the right, you will see the actual connection start times.
Lastly, if you want to do a search on specific timeframes, you could do a 'Custom Search' by
selecting a custom Search like follows, and specifying the following fields which are SMF based:
s Perform Custom Search
"(" Field Opr Value Gen ")" Bool
+ $IPENDDTTM + LE 08-FEB-2019 16:00 + + AND
+ $IPSTARTDTTM + GT 08-FEB-2019 10:00 + +
Commonly used variables / field values:
$IPKEY – keyed field that limits the records to be searched. This is a date in the format of yyyymmddhhmmss.
Note: ddhhmmss can also be replaced by 000 (lowest value for the date) or 999(highest value for the date)
Also – this date is stored as GMT.
$IPDATE - non-keyed date field with format dd-MON-yyyy
$IPLCLPORT – local port number
$IPRMTPORT – remote port number
$IPRECTYPE - denotes the type or record, i.e; CN = connection record
FC = FTP client
FS = FTP Server
TS = Telnet Server
As seen below, the TIME is specified as the time when the record was written to the database. There are various factors that could contribute to having the times being different - thus these time frames represent two different values and are not the same thing. The TIME on the first panel is the TIME record was written, the times within the specific record comes straight from SMF and indicate the time the connection started and ended.
Fields
Type identifies the source of the record:
CN : TCP Connection event
Cmnd is the command, subcommand, or action performed:
INIT : Start connection
TERM : End connection
Time is the time the record was written to the events
database.
Date is the date the record was written to the events
database.
Also, if you PF11 and go to the right, you will see the actual connection start times.
Lastly, if you want to do a search on specific timeframes, you could do a 'Custom Search' by
selecting a custom Search like follows, and specifying the following fields which are SMF based:
s Perform Custom Search
"(" Field Opr Value Gen ")" Bool
+ $IPENDDTTM + LE 08-FEB-2019 16:00 + + AND
+ $IPSTARTDTTM + GT 08-FEB-2019 10:00 + +
Commonly used variables / field values:
$IPKEY – keyed field that limits the records to be searched. This is a date in the format of yyyymmddhhmmss.
Note: ddhhmmss can also be replaced by 000 (lowest value for the date) or 999(highest value for the date)
Also – this date is stored as GMT.
$IPDATE - non-keyed date field with format dd-MON-yyyy
$IPLCLPORT – local port number
$IPRMTPORT – remote port number
$IPRECTYPE - denotes the type or record, i.e; CN = connection record
FC = FTP client
FS = FTP Server
TS = Telnet Server
Feedback
Yes
No
Powered by
