Re: Strange device creations

QSYSMSG does not get hit until ceiling on signon attempts ... 
wrksysval CHECK SUBTYPE *SEC ... also check ceiling on 
virtual objects ... more info also in security audit 
journal ... a flaky PC hardware connection can cause retries 
very rapidly, and never get in ... we also had some 
accountant "save $" by having the last line on voice phone 
extensions shared by ECS line, a scheme which unpaid for 
itself many times over when consultants constantly knocked 
off that we were paying oodles of $ an hour for an urgent 
project when all our voice phone lines busy.

---- Original message ----

Date: Tue, 3 Oct 2006 09:18:55 -0400
From: "Dave Snyder" <Dsnyder@xxxxxxxxxx>  
Subject: Strange device creations  
To: "Midrange Systems Technical Discussion" <midrange-

l@xxxxxxxxxxxx>

I have a strange situation occurring on our box that I can 

not figure

out and I am hoping someone can give me clue where to look. 

Every 15

minutes we are having six 3179 devices created on our system 

by

auto-config (they have a standard four letter naming 

convention prefix)

and I can not figure out what is doing it. It must be a 

remote system

that is trying to log in, using a bogus user name, but I can 

not track

any details down on it, other than it is created by the QCTP 

user. I

have checked job logs and the system history log to no 

avail. I am

trying to figure out what the IP address might be that is 

doing it but

not sure where to look.



Any ideas where to figure out what might be doing this?



Dave 




***********************************************
PRIVILEGED AND CONFIDENTIAL:
This communication, including attachments, is for the 

exclusive use of the addressee and may contain proprietary, 
confidential and/or privileged information. If you are not 
the intended recipient, any use, copying, disclosure, 
dissemination or distribution is strictly prohibited.  If you 
are not the intended recipient, please notify the sender 
immediately by return e-mail, delete this communication and 
destroy all copies.

***********************************************

-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-

L) mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.