RE: Stock QAUDJRN query QSECAF

Mike,

Treat the AF entries as abnormal until you know for certain that they
are benign. Some person and/or function is unsuccessfully attempting to
access that directory on a regular basis, and you should probably
understand why.

At the very least, it's an indication of an application program problem.

jte

--
John Earl, VP and Chief Technology Officer
PowerTech: 253-872-7788
Direct: 253-479-1408
Mobile: 206-669-3336
John.Earl@xxxxxxxxxxxxx




Email is an excellent way to communicate material that is not time
sensitive. If your communication is of a more urgent nature, please
call.

===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Wednesday, August 15, 2007 6:02 AM
To: Midrange Systems Technical Discussion
Subject: Stock QAUDJRN query QSECAF

We are currently running Security Level 30 and have Auditing turned

on. We

get the daily report on AF entries in the journal and most days it is
hundreds of pages long. Last night's was 1,244 pages. About 1,000 of
those pages are AF entries from QEJBSVR showing object type *DIR and
details in the log show a reference to
"/QIBM/ProdData/HTTP/Admin/LWI/runtime" (at least the 100 or so I
checked).

Is this normal?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.