Message ACF01137 shows the source (ACC-SRCE field) as C5A81E62. What kind of source is this? Where did it come from?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Sample message:
ACF01137 logonid LAST SYSTEM ACCESS 21.38-mm/dd/yy FROM 7BDE4E63

The source (ACC-SRCE field) in this example shows as 7BDE4E63.

 

Environment

Release:
Component: ACF2MS

Resolution

The ACC-SRCE field in the logonid record has a maximum length of 8 characters. In this example, the value 7BDE4E63 is the hex representation of an IP address.

An IP address consists of 4 numbers (0-255) in a dot decimal format, also known as octets. To translate this source, break it down to the four values, then convert from hex to decimal, giving the numeric IP address.

7BDE4E63 = 7B.DE.4E.63 = 123.222.78.99

where x'7B' = decimal 123
         x'DE' = decimal 222
         x'4E' = decimal 78
         x'63' = decimal 99

When ACF2 receives a source that is an IP address, ACF2 performs the reverse process, converting the decimal values to hex values and removes the dot separators, thus reducing the length to 8 characters.