Rob,
I see that, I'll have to work on setting up that SQL.
I can set this up in a scheduled job and monitor all traffic from x.x.x.5 until we can everything converted.
Monumental task.
Every PC (700+) that has iSeries connections has either x.x.x.5 or Pencor05 in the system name for the PC5250 communication tab.
Not sure how we are going to handle this.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Monday, November 14, 2016 8:53 AM
To: Midrange Systems Technical Discussion
Subject: RE: How does one determine who is using a DNS entry
NETSTAT_INFO is not in the 7.1 Knowledge Center but...
SELECT *
FROM QSYS2.SERVICES_INFO
WHERE EXAMPLE LIKE '%NETSTAT%';
says the EARLIEST_POSSIBLE_RELEASE is V7R1M0.
I did a search. At IBM i 7.1 SF99701 Level 40 they added stuff so I assume it was there prior to Level 40.
https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM%20i%20Technology%20Updates/page/QSYS2.NETSTAT_INFO
It is mentioned for 7.1 TR11
https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM%20i%20Technology%20Updates/page/IBM%20i%207.1%20-%20TR11%20Enhancements
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: "Steinmetz, Paul" <PSteinmetz@xxxxxxxxxx>
To: "'Rob Berendt'" <rob@xxxxxxxxx>, "'Midrange Systems Technical
Discussion'" <midrange-l@xxxxxxxxxxxx>
Date: 11/14/2016 08:39 AM
Subject: RE: How does one determine who is using a DNS entry
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
Rob,
Thanks for all the tips.
NETSTAT_INFO view not available at V7R1, to the best of my knowledge.
Hope to be on V7R2 sometime 1st quarter 2017, more tools available.
NETSTAT sorted by local IP, position to, does show me everything
connecting to x.x.x.5.
Next weekend we will be upgrading all our JWALK to Legasuite.
The JWALK is currently running on the x.x.x.5 IP.
The Legasuite will be on the y.y.y.5 IP.
This will resolve 75% of the traffic.
The netstat list is still huge.
Lots of work to do.
Paul
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Monday, November 14, 2016 8:13 AM
To: Midrange Systems Technical Discussion
Subject: Re: How does one determine who is using a DNS entry
And, dollars to doughnuts, there is a way to see this using IBM Navigator
for i
Network, TCP/IP Configuration, IPv4, IPv4 Connections
And the columns are sortable.
BCC'ing you an image.
[cid:image001.gif@01D23E51.6A4E38B0]
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com<
http://www.dekko.com/>
From: Rob Berendt <rob@xxxxxxxxx<mailto:rob@xxxxxxxxx>>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx<
mailto:midrange-l@xxxxxxxxxxxx>>
Date: 11/14/2016 08:02 AM
Subject: Re: How does one determine who is using a DNS entry
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx<
mailto:midrange-l-bounces@xxxxxxxxxxxx>>
________________________________
I reread your article after seeing some of the replies.
You want to know who is using x.x.x.5 so you can tell them to use the
newer more secure y.y.y.5, right?
And you want to phase this in so that you can see if you've totally muffed
up the new firewall? Therefore you don't just want to change your DNS
from x.x.x.5 to y.y.y.5?
Well, my answer is that the same technique will help you in several ways.
Find out all the ports currently being served by the existing address.
This will allow your network admin to ensure they are correct on the new
firewall.
The same technique used to determine these ports can also be used to find
out the remote addresses using these ports.
There are two ways to get this information. One way is by using
NETSTAT *CNN
There are a lot of function keys, like change the description of the port
to a number, show the local IP address (in your case x.x.x.5) and so on.
There is another way which the network admin may prefer. Have him use his
favorite query tool (or Run SQL Scripts) and have him use the
"NETSTAT_INFO view" or one of the other views at
https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_73/rzajq/rzajqservicestcpip.htm
I think he will like the "NETSTAT_INFO view".
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com<
http://www.dekko.com/>
From: "Steinmetz, Paul" <PSteinmetz@xxxxxxxxxx<
mailto:PSteinmetz@xxxxxxxxxx>>
To: "'Midrange Systems Technical Discussion'"
<midrange-l@xxxxxxxxxxxx<mailto:midrange-l@xxxxxxxxxxxx>>
Date: 11/11/2016 04:36 PM
Subject: How does one determine who is using a DNS entry
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx<
mailto:midrange-l-bounces@xxxxxxxxxxxx>>
We have two DNS entries, one for Production LPAR and one for R&D LPAR.
Each DNS entry point to our original IP.
Pencor05.pencor.com points to x.x.x.5
Pencor06.pencor.com points to x.x.x.6.
We have a 2nd IP on each LPAR, going through a 2nd firewall.
We'd like to change the two DNS entries to point to the newer, more secure
IP.
Things will fail.
Is it possible to determine who or what is using these DNS entries?.
I probably need the network folks to create 2 new DNS entries for each of
the new IPs.
Anyone ever go through this exercise.
Thank You
_____
Paul Steinmetz
IBM i Systems Administrator
Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071
610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home
psteinmetz@xxxxxxxxxx<mailto:psteinmetz@xxxxxxxxxx>
http://www.pencor.com/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx<
mailto:MIDRANGE-L@xxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx<
mailto:MIDRANGE-L-request@xxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx<mailto:support@xxxxxxxxxxxx> for any
subscription related
questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx<
mailto:MIDRANGE-L@xxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx<
mailto:MIDRANGE-L-request@xxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx<mailto:support@xxxxxxxxxxxx> for any
subscription related questions.
midrange.com
