Re: Strange device creations

[<macwheel99@xxxxxxxxxxx>]

QSYSMSG does not get hit until ceiling on signon attempts ... 
wrksysval CHECK SUBTYPE *SEC ... also check ceiling on 
virtual objects ... more info also in security audit 
journal ... a flaky PC hardware connection can cause retries 
very rapidly, and never get in ... we also had some 
accountant "save $" by having the last line on voice phone 
extensions shared by ECS line, a scheme which unpaid for 
itself many times over when consultants constantly knocked 
off that we were paying oodles of $ an hour for an urgent 
project when all our voice phone lines busy.

---- Original message ----
> Date: Tue, 3 Oct 2006 09:18:55 -0400
> From: "Dave Snyder" <Dsnyder@xxxxxxxxxx>  
> Subject: Strange device creations  
> To: "Midrange Systems Technical Discussion" <midrange-
l@xxxxxxxxxxxx>
> I have a strange situation occurring on our box that I can 
not figure
> out and I am hoping someone can give me clue where to look. 
Every 15
> minutes we are having six 3179 devices created on our system 
by
> auto-config (they have a standard four letter naming 
convention prefix)
> and I can not figure out what is doing it. It must be a 
remote system
> that is trying to log in, using a bogus user name, but I can 
not track
> any details down on it, other than it is created by the QCTP 
user. I
> have checked job logs and the system history log to no 
avail. I am
> trying to figure out what the IP address might be that is 
doing it but
> not sure where to look.
>
>
>
> Any ideas where to figure out what might be doing this?
>
>
>
> Dave 
>
>
>
>
> ***********************************************
> PRIVILEGED AND CONFIDENTIAL:
> This communication, including attachments, is for the 
exclusive use of the addressee and may contain proprietary, 
confidential and/or privileged information. If you are not 
the intended recipient, any use, copying, disclosure, 
dissemination or distribution is strictly prohibited.  If you 
are not the intended recipient, please notify the sender 
immediately by return e-mail, delete this communication and 
destroy all copies.
> ***********************************************
>
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-
L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.