What Events Are Logged?
Field Description
Port | • For session connect/disconnect events: |
—Local Access: The port the session connect or disconnect occurred on. If the connection is initiated from a physical port, this field will have the physical port number. If the connection is initiated from an existing remote console connection, the port number will be one higher than the maximum physical port number.
—Remote Access: For a remote console connection (MOP or Telnet), the port will be one higher than the maximum physical port number. For a connection to a LAT service or Telnet listener (other than listener 23), the port will be the destination physical port the connection is made to. If no port is available, the port field will be zero.
| Note: If a connection is created from a physical or remote console |
| port to a Telnet listener or LAT service on the same server, two |
| session connect events will be logged: one for the local access from |
| the source port and one for the remote access to the destination port. |
| Two disconnect events will also be logged when the session is torn |
| down. In each log entry, the port number will follow the rules stated |
| above. |
| • For nonsession events, the port that the event occurred on. |
ID | The internal ID associated with an active session (not those that are |
| displayed in the SHOW SESSION displays). The session IDs are |
| always unique across the server at any given time (though they may |
| be reused after a session is disconnected). |
Accounting