Parameter

Description

System

The SMF ID of the system that wrote the record.

Jobname

Local job name.

Userid

Local userid.

IP Address

Local or remote IP address

Port

Server port

Exclude Loopback

Exclude connections to the loopback address 127.0.0.1 or ::1 from the report.

Auth Method

Filter by first or last authentication method.

Enc Alg

Filter by inbound or outbound encryption algorithm.

Msg Auth

Filter by inbound or outbound message authentication algorithm.

Kex Method

Filter by key exchange method.

Sig Method

Filter by server or client certificate signature method.

Cert Enc Method

Filter by server or client certificate encryption method.

Cert Digest Alg

Filter by server or client certificate digest algorithm

Key Type

Filter by key type (raw client or server key, client or server certificate key).

Column

Description

System

The system that wrote the record.

Server IP

IP Address of the server end of the connection.

Client IP

IP Address of the client end of the connection.

Port

The server port for the connection, or the starting value of the port range.

Protocol Ver

SSH protocol version.

First Auth

First or only peer authentication method.

Last Auth

The last peer authentication method, if there were multiple.

Inbound Enc Alg

Encryption algorithm for inbound traffic.

Inbound Msg Auth

Message authentication algorithm for inbound traffic.

Outbound Enc Alg

Encryption algorithm for outbound traffic.

Outbound Msg Auth

Message authentication algorithm for outbound traffic.

Kex Method

Key exchange method.

Server Key Type

Server key type.

Server Key Len

Server key length.

Client Key Type

Client key type.

Client Key Len

Client key length.

Entries

The number of entries in this grouping.

Jobname

The z/OS job name associated with the socket.

Userid

The z/OS userid associated with the socket.

From

The start time of the first grouped interval.

To

The end time of the last grouped interval.

Connections

The count of connections in the group - the end connection count minus start connection count for each interval.

Short Connections

The count of short connections (less than 10 seconds).

Partial Connections

The count of partial connections: connections where the connection existed before or continued to exist after the security session.

Server Cert Sig Method

Server certificate signature method.

Server Cert Enc Method

Server certificate encryption method.

Server Cert Digest Alg

Server certificate digest algorithm.

Server Cert Key Type

Server certificate key type.

Server Cert Key Len

Server certificate key length.

Client Cert Sig Method

Client certificate signature method.

Client Cert Enc Method

Client certificate encryption method.

Client Cert Digest Alg

Client certificate digest algorithm.

Client Cert Key Type

Client certificate key type.

Client Cert Key Len

Client certificate key length.

Source

Source of the information: Observation or Provider.