Why do connection events show delayed timing in Netmaster IPHISTORY?

book

Article ID: 129659

calendar_today

Updated On:

Products

CA CMDB for z/OS CA NetSpy Network Performance CA NetMaster Network Automation CA SOLVE CA NetMaster Network Management for SNA CA NetMaster Network Management for TCP/IP CA NetMaster File Transfer Management

Issue/Introduction



When looking at the IP History on one system, the connection events timestamp in the list is different  (later) than the time for the event itself.

Example: Browse Browse Connection and Event Details. 
Then List all Connection events

The list shows
Type Cmnd Time     Date         Sec? Jobname  Userid   Application Name
CN   TERM 10:16:37 08-FEB-2019  NO   CICSSY1           OTHER


and when you select it.. 
Connection Details

  Connection Started ....... 08-FEB-2019 08:10:12
  Connection Ended ......... 08-FEB-2019 08:10:17
  User (if known) .......... 


It's more than 2 hrs delayed. 

Environment

Release: SLOPFC00200-12.1-NetMaster-File Transfer Management
Component:

Resolution

This is working as designed, and the HELP for this indicates this to be the case. Please review the online HELP.
As seen below,  the TIME is specified as the time when the record was written to the database. There are various factors that could contribute to having the times being different - thus these time frames represent two different values and are not the same thing. The TIME on the first panel is the TIME record was written, the times within the specific record comes straight from SMF and indicate the time the connection started and ended. 

Fields 
Type identifies the source of the record: 

CN : TCP Connection event 

Cmnd is the command, subcommand, or action performed: 

INIT : Start connection 
TERM : End connection 

Time is the time the record was written to the events 
database. 

Date is the date the record was written to the events 
database. 


Also, if you PF11 and go to the right, you will see the actual connection start times. 

Lastly, if you want to do a search on specific timeframes, you could do a 'Custom Search' by 
selecting a custom Search like follows, and specifying the following fields which are SMF based: 
s Perform Custom Search 


"("   Field          Opr  Value                           Gen ")"   Bool
   + $IPENDDTTM   + LE   08-FEB-2019 16:00               +        + AND
   + $IPSTARTDTTM + GT   08-FEB-2019 10:00               +        +    



Commonly used variables / field values: 
$IPKEY – keyed field that limits the records to be searched. This is a date in the format of yyyymmddhhmmss. 
Note: ddhhmmss can also be replaced by 000 (lowest value for the date) or 999(highest value for the date) 
Also – this date is stored as GMT. 
$IPDATE    - non-keyed date field with format dd-MON-yyyy 
$IPLCLPORT – local port number 
$IPRMTPORT – remote port number 
$IPRECTYPE - denotes the type or record, i.e; CN = connection record 
FC = FTP client 
FS = FTP Server 
TS = Telnet Server