Re: Security

[John Earl <johnearl@xxxxxxxxxxx>]

Mike,

The TCP/IP exit points will trap this information for you.  The IP address is
presented as part of the request data string.

hth,

jte

mcrump@ballfoster.com wrote:

> Here's one:
>
> I've had some probes from our internal auditors and the consultants they have
> hired.  I've been able to see a lot of things through standard reports but one
> area that I have no answer for is can we log TCP address usage?  For example, 
>as
> part of their test they ran a dictionary type of profile probe against some 
>TCP
> ports (POP3 and LPD for example).   We could see them (invalid logins etc.) 
>but
> I had no easy way to determine which address theyI were coming in on....is 
>there
> any easy way to log TCP usage by IP adress?   I'm interested in logging TCP
> application and the address used.....
>
> Thanks in advance.
>
> BTW, I am at V4R2.....
>
> Mike
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl                                              johnearl@toolnet.com
PowerTech Toolworks                         206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                    www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---