HPlogo HP Security Monitor/iX Manager's Guide: HP 3000 MPE/iX Computer Systems > Chapter 7 Auditing System Use

System Log Record Formats

» 

Technical documentation

Complete book in PDF
» Feedback

 » Table of Contents

 » Index

The rest of this chapter includes the format of the log records. Notes following the log records describe the significant fields in the records.

Log failure record, type 100

Table 7-7 Log Record Heading Format

Length, in 16-bit WordsRecord Content
1Record type (100)
1Record length
1Process identification number
3Time stamp
2Job type/job number
2Missing log records*
1Missing job initiations*
1Missing job terminations*
1Missing I/O records*

 

* Lost when system logging is suspended or disabled.

System up record, type 101

Table 7-8 System Up Record Format

Length, in 16-bit WordsRecord Content
1Record type (101)
1Record length
1Process identification number
3Time stamp
2Job type/job number
4Version ID (v.uu.ff)/Last 8 bits unused
2Maximum number of concurrent jobs and sessions
2Boot code
16Boot device
16Configuration group used for boot
2NL checksum
2Config checksum
2SL checksum
128Operating system nonvolatile storage

 

NOTES:

Boot code:

0

= Start with recovery.

1

= Start with no recovery.

2

= Update with a configuration change.

3

= Update without a configuration change.

4

= Install (new operating system loaded).

Configuration group used for boot (ASCII)

Name of group containing configuration data files used when START was invoked.

The NL, Config, and SL checksums fields are set to 0.

Operating system nonvolatile storage contains the following:

Table 7-9 ISL Data for Last Boot (128 bytes)

Reserved36 bytes
Boot path32 bytes
ISL revision4 bytes
Time stamp (# seconds since 1970)4 bytes
LIF utility entries entered48 bytes
Pointer to last utility1 byte
Word alignment3 bytes

 

Table 7-10 MPE/iX Operating System System-Dependent Data (128 bytes)

Time stamp (# seconds since 1970)4 bytes
# microseconds since last second4 bytes
GR2 (caller's PC)4 bytes
MPE/iX status:4 bytes
For system abort, this contains failure number: 
(1) Error (2 bytes) 
(2) Subsystem (2 bytes) 
MPE/iX version (vv.uu.ff)8 bytes
Message string (if any)*64 bytes
Halt number2 bytes
Lockup error code2 bytes
Reserved36 bytes

 

*Identifies entity logging this entry (abort or shutdown).

Boot Device

Indicates the primary boot path, as follows:

Word 1:  
Bits(0:8)Flags
 (8:8)Bus Converter 0
Word 2:  
Bits(0:8)Bus Converter 1
 (8:8)Bus Converter 2
Word 3:  
Bits(0:8)Bus Converter 3
 (8:8)Bus Converter 4
Word 4:  
Bits(0:8)Bus Converter 5
 (8:8)Physical Module
   
Words 5 and 6: Logical Module
Words 7-16: Device-dependent

Job initiation record, type 102

Table 7-11 Job Initiation Record Format

Length, in 16-bit WordsRecord Content
1Record type (102)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8Job name
8User name
8Home group name
8Account name
8Logon group name
1Input logical device number
1Output logical device number
1Reserved (bits 0-7)/Logon queue (bits 8-15)
2CPU time limit
1Inpri (bits 0-7)/Outpri (bits 8-15)
8CI program name
8CI program group name
8CI program account name
2MPE/iX logon status

 

NOTES:

Logon queue

  • Execution queue the job will run on.

CPU time limit

  • CPU time limit (in number of seconds) given by user on JOB or HELLO command, as follows:

          0 = not given

          # = number given

MPE/iX status

  • If failure occurred during job initiation, the MPE/iX status indicates an error. This field can be any MPE/iX status from the OS. If successful, value is zero.

  • Unlike MPE V, unsuccessful logon attempts are logged in MPE/iX system logging.

Job termination record, type 103

Table 7-12 Job Termination Record Format

Length, in 16-bit WordsRecord Content
1Record type (103)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Maximum priority
1Number of creations
2CPU time in seconds
2Connect time

 

Process termination record, type 104

Table 7-13 Process Termination Record Format

Length, in 16-bit WordsRecord Content
1Record type (104)
1Record length
1Process identification number
3Time stamp
2Job type/job number
2CPU time in milliseconds
2Native mode stack size in bytes
2Native mode heap size in bytes
1CM mas stack in 16-bit words
1Termination type
8Reserved

 

NOTES:

Termination types:

0 =

Normal

1 =

Dependency (This process depends upon a terminated process.)

2 =

Killed (This process was terminated by another using KILL.)

3 =

Quit (This process called the QUIT intrinsic.)

4 =

Quitprog (This process called the QUITPROG intrinsic.)

5 =

Softfault (This process terminated due to a fault.)

NM File close record, type 105

Table 7-14 File Close Record Format

Length, in 16-bit WordsRecord Content
1Record type (105)
1Record length
1Process identification number
3Time stamp
2Job type/job number
4Number of logical reads
4Number of byes read
4Number of logical writes
4Number of bytes written
8File name
8Group name
8Account name
8Creator name
8User name
8User group
8User account
10Unique file identifier (UFID)
2Reserved
2Close disposition
2Open domain
2File size in bytes
4File open count

 

NM File close record, type 205

The type 205 record has a "maximum path exceeded" flag.

The LDEV number of a file is also included in the log record. In most cases this is the LDEV number of the file's label and initial extent since files are not usually restricted to one volume.

Table 7-15 “Record Type 205” illustrates the format of the type 205 record.

Table 7-15 Record Type 205

Length, in 16-bit WordsRecord Content
1Record type 205
1Event version
1Record length
1PIN
2Job type/Job number
2Time stamp time
1Time stamp date
1Login type (if 1, logon name is in the format 16-byte user 16-byte acct)
18Logon name
8Job/session name
4Reserved
4# logical reads
4# bytes read
4# logical writes
4# bytes written
8Creator user name (from flabel: user.acct for new files)
10UFID
2Close disposition
2Open domain
2File size
2File number
4File open count
4Number records read
4Number records written
1File LDEV #
1"Maximum path exceeded" flag (true if full path not recordable)
##Variable-length name buffer (file name terminated with a 0 )

 

NOTES:

Unique file identifier (UFID)

  • Internal file identifier. Internal data structure that uniquely identifies a file. This entity is printed in hex.

Disposition field

Close Disposition (bits 13:3)Open Domain

0 No change.

0 New file.

1 Save permanent.

1 Old permanent file.

2 Save temporary - rewound.

2 Old temporary file.

3 Save temp - not rewound.

3 Old job or sys.

4 Delete.

 

5 Make temporary.

 

Disk Space Disposition (bits 11:2)

0Do not return disk space allocated beyond EOF.
1Return disk space allocated beyond EOF to system; EOF becomes file limit.
2Return disk space allocated beyond EOF to system; file limit remains the same (NM file types only).

The Disposition field in an NM file close record can have values from 0-9, 8-13, and 16-21. The number 255 is also a valid value for the Disposition field. Any files left open during process termination are closed by the system and given a disposition of 255.

Shutdown record, type 106

Table 7-16 Shutdown Record Format

Length, in 16-bit WordsRecord Content
1Record type (106)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Number of jobs
1Number of sessions

 

Power failure record, type 107

Table 7-17 Power Failure Record Format

Length, in 16-bit WordsRecord Content
1Record type (107)
1Record length
1Process identification number
3Time stamp
2Job type/job number

 

I/O error record, type 111

Table 7-18 I/O Error Record Format

Length, in 16-bit WordsRecord Content
1Record type (111)
1Record length
1Process identification number
3Time stamp
2Job type/job number
20Hardware product number
20Physical path description
20Logical device name
1Device class identifier
1Diagnostic message class (bits 0-7)/Not used (bits 8-15)
2I/O manager status
1Reserved (bits 0-6) LAR (bit 7)/\Reserved (bits 8-14) RA (bit 15)
1Reserved (bits 0-6) IW (bit 7)/\Reserved (bits 8-14) AD (bit 15)
1Retry count
1Reserved
2I/O manager port number
2Transaction number
1Hardware status length
1Not used
20Hardware status
1Length of I/O manager data
1ID of I/O manager
36I/O manager-specific data

 

NOTES:

Hardware product number is the number of the device; for example, 7935.

Physical path description is the hardware path to the device; for example, 2/4.0.1 (2 = bus, 4 = channel, 0 = device adapter, and 1 = device). It is hardware dependent.

Logical device name is the LDEV number.

Device class identifier identifies the type of device, such as disk, tape drive, or printer.

Diagnostic message class specifies the reason for logging this error:

0

= Hardware event

1

= Software event

2

= Other

I/O manager status is the LLIO status from the driver. It gives the reason for the I/O error.

LAR

= Log all retries requested by I/O manager

RA

= Retry again - I/O manager attempts retry

IW

= I/O worked - Retry was successful

AD

= Auto-diagnostic requested by I/O manager

Retry count varies depending on the value of LAR. If LAR is true, then the retry count is the number for the nth retry. If LAR is false, it is the number of retries performed.

I/O manager port number is the IPC port number of the device manager. It is usually a negative number.

Transaction number is the number of the I/O request.

Hardware status length specifies how much of the hardware status field contains valid data.

Hardware status contains status bytes from the device. The field may contain up to 40 bytes of error information. The information is device dependent.

Length of I/O manager data specifies how much of the I/O manager specific data field contains valid data.

ID of I/O manager is the subsystem number.

I/O manager specific data is driver-specific data that relates to the I/O error. It can contain up to 72 bytes of information.

Physical mount/dismount record, type 112

Table 7-19 Physical Mount/Dismount Format

Length, in 16-bit WordsRecord Content
1Record type (112)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Mount/Dismount type
1Volume type
2Logical device number
1MV table ID (bits 0-5)/Not used (6-15)
1Vol ID (bits 0-7)/Not used (8-15)
2Volume identification
8Volume name
16Volume set name

 

NOTES:

Mount/Dismount ValuesLog Volume Types
0 = Device- or user-initiated mount1 = Master volume
1 = Device-initiated dismount3 = Loner volume
 6 = Scratch volume
 7 = Unknown volume

Logical mount/dismount record, type 113

Table 7-20 Logical Mount/Dismount Record Format

Length, in 16-bit WordsRecord Content
1Record type (113)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Mount/Dismount
1Request type
8User name
8Group name
8Account name
16Volume set name
1Number of volumes in set
1Logical device of first volume
1Logical device of next volume
1Logical device of next volume
1Logical device of next volume
1Logical device of next volume
1Logical device of next volume
1Logical device of next volume
1Logical device of next volume

 

NOTES:

Mount/DismountRequest Types
0 = Logical mount 0 = User
1 = Logical dismount 1 = Operator

Tape labels record, type 114

Table 7-21 Tape Labels Record Format

Length, in 16-bit WordsRecord Content
1Record type (114)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Logical device number
1File sequence number
1File number (bits 0-7)/Sq type (bits 8, 9) /Type (bits 10, 11)/Reserved (bits 12-15)
1Not used (bits 0-7)/Volume sequence number (bits 8-15)
1Expiration date
9File name/Not used (last 8 bits)
4Lockword
3Volume set ID
3Volume ID
1PIN *

 

  • * PIN of the process making the tape label request.

NOTES:

Sq Type (2 bits)

0

= Search for match on file name

1

= Next or default

2

= Add file to end of volume set

3

= Specified file sequence number

Type (2 bits)

2

= ANSI standard label

3

= IBM standard label

Console log record, type 115

Table 7-22 Console Log Record Format

Length, in 16-bit WordsRecord Content
1Record type (115)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Byte length of console line
Up to 140Console input or output line

 

* If length is less than zero, console message is input. If length is greater than zero, console message is output.

Program file event record, type 116

Table 7-23 Program File Event Record Format

Length, in 16-bit WordsRecord Content
1Record type (116)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Event type
1Delta P
1Status
25Program file name
2Native mode offset
1Type (bits 0-3)/Calling location (bits 4-15)

 

NOTES:

This record appears only during execution of unusual Compatibility Mode code to provide a trap warning, or from the Run-Time Event Monitor (compatibility mode process).

Event Type

  • <0 = Compatibility mode trap warning

  • >0 = Run-time event monitor (RTEM) error

Native Mode Offset:

Applicable only for negative event type numbers.

Calling Location

Applicable only for positive event type numbers.

Type

  • 0 = System SL

  • 1 = Pub SL

  • 2 = Group SL

  • 3 = Program file

Bits 4-12 = Segment number

NMS spoolfile done log record, type 120 (input)

Table 7-24 Spoolfile Done Log Record Format (Input)

Length, in 16-bit WordsRecord Content
1Record type (120)
1Record length
1Process identification number
3Time stamp
2Job type/job number
4User name
4Reserved
4Account name
4Reserved
4Job name
4Reserved
4File name
4Reserved
2Job type/job number
2Spoolid (all of word 1, bits 0-14 of word 2)/I/O (bit 15 of word 2)
4Device name
4Reserved
2Number of records in spoolfile
2Number of sectors in spoolfile
1Device type (bits 0-7)/Device subtype (bits 8-15)
1Reserved (bits 0=7)/All 0s (bits 8-15)
1All 0s
1All 0s (bits 0-7)/Reserved (bits 8-11)/File disposition (bits 12-15)
2All 0s

 

NMS spoolfile done log record, type 120 (output)

Table 7-25 Spoolfile Done Log Record Format (Output)

Length, in 16-bit WordsRecord Content
1Record type (120)
1Record length
1Process identification number
3Time stamp
2Job type/job number
4User name
4Reserved
4Account name
4Reserved
4Job name
4Reserved
4File name
4Reserved
2Job type/job number
2Spoolid (all of word 1, bits 0-14 of word 2)/I/O (bit 15 of word 2)
4Device name
4Reserved
2Number of records processed
2Number of sectors in spoolfile
1Device type (bits 0-7)/Device subtype (bits 8-15)
1Reserved (bits 0=7)/Output priority (bits 8-15)
1Current copy number
1Logical pages per physical page (bits 0-7)/Reserved (bits 8-11)/File disposition (bits 12-15)
2Number of physical pages

 

NOTES:

Input spoolfile done log records are generated for every spoolfile that is generated.

One output spoolfile done log record is generated and added to the log records for every file copy (or partial file copy) that is printed.

The top two bits of the job type/job number field are the job type, which refers to the spoolfile, as follows:

00

= Spoolfile originally created by a session on another system or another startup of this system (S')

01

= Spoolfile created by a session on a startup of this system (S)

10

= Spoolfile created by a job on a startup of this system (J)

11

= Spoolfile originally created by a job on another system or another startup of this system (J')

I/O :

0 = Input spoolfile

1 = Output spoolfile

Func :

0 = Normal completion

1 = Delete spoolfile

2 = Defer spoolfile

3 = Relink spoolfile

Number of records processed may be greater than the number of records in the file if internal looping or powerfail occurs.

For serial printers, the number of physical pages is always 0.

Processor launch information log record, type 131

Table 7-26 Processor Launch Information Log Record Format

Length, in 16-bit WordsRecord Content
1Record type (131)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8Processor id
8Hard physical address
8Launch status

 

NOTES:

Each processor (except the one that is used to launch the system) logs a processor launch information record.

Processor id

Identifies the type of processor.

Hard physical address (HFA)

The hard physical address of the processor.

Launch status

1

= Can't create interrupt control stack; usually not enough memory.

-2

= Processor launch error; a hardware error.

-1

= Processor already configured.

0

= All OK.

Password changes log record, type 134

Table 7-27 Password Changes Log Record Format

Length, in 16-bit wordsRecord Content
1Record type (134)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8Target user name
8Target group name
8Target account name
1Type changed
1Input LDEV number
25Executed from
3Reserved
8User name
8Group name
8Account name
8Job/session name

 

System logging configuration record, type 135

Table 7-28 System Logging Configuration Record Format

Length, in 16-bit wordsRecord Content
1Record type (135)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1(Reserved)
1LDEV number
4System logging masking words
8User name
8Group name
8Account name
8Job/session name

 

Restore log record, type 136

Table 7-29 Restore Log Record Format

Length, in 16-bit wordsRecord Content
1Record type (136)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8File name
8File group
8File account
8Creator
17Volume identification
1Access type
8User name
8Group name
8Account name
8Job/session name

 

Restore log record, type 236

The type 236 record has a "maximum path exceeded" flag.

The type 236 record is only used by native mode RESTORE since compatibility mode RESTORE uses only MPE name syntax. Compatibility mode RESTORE continues to use the type 136 record.

Table 7-30 “Record Type 236” illustrates the 236 record type.

Table 7-30 Record Type 236

Length, in 16-bit wordsRecord Content
2Record type 236
2Event version
2Record length
2PIN
4Job type/Job number
4Time stamp time
2Time stamp date
2Login type (If , logon name is in the format 16-byte user 16-byte acct)
36Logon name
16Job/Session name
8Reserved
16Creator user name ( user.account for new file names )
34Volume ID
2Access type
2"Maximum path exceeded" flag
##Variable-length buffer (file name terminated by a 0)

 

NOTES:

The restore log record traces file restorations. Files can be restored from tape or serial disk. This logging record can be enabled by SYSGEN, followed by a START command.

Printer access failure log record, type 137

Table 7-31 Printer Access Failure Log Record Format

Length, in 16-bit wordsRecord Content
1Record type (137)
1Record length
1Process identification number
3Time stamp
2Job type/job number
2Creator job number
8Creator job name
8Creator user name
8Creator account name
25Spoolfile name
8Target device name/class
1(Reserved)
2File size
1Status
8User name
8Group name
8Account name
8Job/session name

 

NOTES:

This log keeps track of failed attempts attaching spoolfiles to printers. New spoolfiles, which are logged by FOPEN as event #144, are not logged here.

This log is initially disabled, but can be enabled by SYSGEN, followed by a START command.

ACD changes log record, type 138

Table 7-32 ACD Changes Log Record Format

Length, in 16-bit wordsRecord Content
1Record type (138)
1Record length
1Process identification number
3Time stamp
2Job type/job number
25Target object name
25Source object name
4Function
25Executed from
2Status
8User name
8Group name
8Account name
8Job/session name

 

Type 238

The format of the ACD record has been modified to handle variable-length file names and hierarchical pathnames. The target object name and the source object name fields are variable in length to handle files with expanded names.

Table 7-33 “Record Type 238” illustrates the format of the type 238 record.

Table 7-33 Record Type 238

Length, in 16-bit wordsRecord Content
2Record type 238
2Event version
2Record length
2PIN
4Job type/Job number
4Time stamp time
2Time stamp date
2Login type (If 1, logon name is in the format 16-byte user 16-byte acct)
36Logon name
16Job/Session name
8Reserved
8ACD function
4Status
##Variable-length buffer

 

NOTES:

This log type is activated when ACDs are changed (created, deleted, copied, or modified) with MPE commands or intrinsics.

The log can be enabled by SYSGEN, followed by a START command.

Job stream initiation log record, type 139

Table 7-34 Stream Initiation Log Record Format

Length, in 16-bit wordsRecord Content
1Record type (139)
1Record length
1Process identification number
3Time stamp
2Job type/job number
1Input LDEV
25Job file name
2Job logon Job/session number
8Job logon user
8Job logon group
8Job logon account
8Job name
2Input spoolfile ID
1Scheduled date
2Scheduled time
8User name
8Group name
8Account name
8Job/session name

 

User logging record, type 140

Table 7-35 User Logging Record Format

Length, in 16-bit wordsRecord Content
1Record type (140)
1Record length
1Process identification number
3Time stamp
2Job type/job number
25Program file name
4Intrinsic
2Index
4LOG ID*
1Mode
1Status
8User name
8Group name
8Account name
8Job/session name

 

  • *The LOG ID field in the log record contains "XXXXXX" for the CLOSELOG intrinsic when the index is bad.

NOTES:

The user logging record log keeps track of all OPENLOG and CLOSELOG intrinsic calls. The system manager can use it to see who accesses, or tries to access, the user logging facility.

This log is initially disabled, but can be enabled by SYSGEN, followed by a START command.

Process creation log record, type 141

Table 7-36 Process Creation Record Format

Length, in 16-bit wordsRecord Content
1Record type (141)
1Record length
1Process identification number
3Time stamp
2Job type/job number
25File name
1(Reserved)
2Priority
2Process Space ID
4Parent PID
2NM_Heap_Size
2Capabilities mask*
8(Reserved)
8User name
8Group name
8Account name
8Job/session name

 

*The capabilities mask is read as follows:

     User              File access          Program/group

bit    capability    bit   capability      bit   capability

 0        SM          6       CV            23      BA

 1        AM          7       UV            24      IA

 2        AL          8       LG            25      PM

 3        GL          9       SP            28      MR

 4        DI         10       PS            30      DS

 5        OP         11       NA            31      PH

                     12       NM

                     13       CS

                     14       ND

                     15       SF

Internal Data Structure, type 242

The data structure of log record type 242 for Security Configuration Changes is as follows:

Table 7-37 Internal Data Structure

Length, in 16-bit wordsRecord Content
1Record type (242)
1Event Version (1)
1Record length
1PIN
2Job type/job number
2Time stamp time
1Time stamp date
1Login type
18Logon name format
8Job/session name
8Future place of the UID & GID
20Security Configuration feature
20Old value
20New Value

 

Change group record, type 143

Table 7-38 Change Group Record Format

Length, in 16-bit WordsRecord Content
1Record type (143)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8Old group name
8New group name
2CPU time
2Connect time

 

File open record, type 144*

Table 7-39 File Open Record Format

Length, in 16-bit WordsRecord Content
1Record type (144)
1Record length
1Process identification number
3Time stamp
2Job type/job number
8User name
8User's account name
8User's logon group name
2User ID
8File name
8File group name
8File account name
8File creator name
10 File UFID
2File number
1Foptions
1File code
1Reserved (bits 0-5)/Access privileges (bits 6-7)/ Security mask (bits 8-15)
1Reserved
2HPE status
2Object size (current)
2File Limit
3File descriptor
7Reserved

 

File open record, type 244

The file creator name has been modified to log the "user.account" string instead of just the user string for files that are created.

Table 7-40 “Record Type 244” illustrates the format of record type 244.

Table 7-40 Record Type 244

Length, in 16-bit WordsRecord Content
1Record type 244
1Event version
1Record length
1PIN
2Job type/Job number
2Time stamp time
1Time stamp date
1Login type (If 1, logon name is in the format 16-byte user 16-byte acct)
18Logon name
8Job/Session name
4Reserved
10UFID
2File number
1Foptions
1File code
2File domain
2File record format
2File type
6bitReserved
2bitAccess priv level
8bitMPE security mask
2Open status
2Object size
2File limit
3File descriptor
8File creator (user.account for new files)
2"Maximum path exceeded" flag
##Variable length name buffer (format: file name0 )

 

The file open record is only logged when an error is detected during FOPEN; therefore, the values in the record are not always valid. Specifically, values in the File Limit and Object Size fields are only valid after an error is detected during FOPEN.

Configurable Command Logging

Through the Security Configuration Utility, system managers can specify which MPE commands, when executed, are to be logged by the system logging facility. Log record type 245 will be used to log command execution and its status.

The default setting for this system logging event is "ON".

Table 7-41 Record Type 245

Length, in 16-bit WordsRecord Content
1Record type 245
1Event version
1Record length
1PIN
2Job type/Job number
2Time stamp time
1Time stamp date
1Login type (If 1, logon name is in the format 16-byte user 16-byte acct)
18Logon name
8Job/Session name
8Reserved
1CIERR
1stdin Ldev
14Program file name or CI
1Command Length
140Command image (variable length)

 

Maintenance Request Record Format, type 146

Table 7-42 Maintenance Request Record Format

Length, in 16-bit WordsRecord Content
1Record type (146)
1Record length
1Process identification number
3Time stamp
2Job type/job number
20Device ID
20PDEV
20LDEV
2Format ID
2Log type
2Head - reserved
948Data

 

NOTES:

FieldLength (Bytes)Description
Device ID32Identifies the device; for example, HP7935 (+8 bytes for Pascal string).
PDEV32Physical path to the device; for example, 8.0.0 (+8 bytes for Pascal string).
LDEV32Logical device file name (+8 bytes for Pascal string).
Format ID41 = data is HP-IB format
  2 = data is FLEX format
  3 = data is NIO format
Logtype40 = no data; no logging errors found
  101 = data is a run-time error data log record
  102 = data is a fault error data log record
Head/Reserved4101 = head number
  0 or 102 = reserved
Data1896Up to 1896 bytes are allowed

Diagnostic information records, type 150

Table 7-43 Auto-Diagnostic Record Format

Length, in 16-bit WordsRecord Content
1Record type (150)
1Record length
1Process identification number
3Time stamp
2Job type/job number
2Type number
16Hardware product number
16Physical path description
16Logical device name
1Device class identifier
50Diagnostic messages

 

NOTES:

There are two different formats for type 150 diagnostic information records: one is the auto-diagnostic record format and the other is the diagnostic system information record format. You can determine which format is used by looking at the type number field just after the header.

Type Number

  • 0 = Auto-diagnostic record format

  • 3 = Diagnostic system information record format

In the diagnostic messages field, a continuation flag indicates whether another related message was placed into the log file.

Diagnostic system information record, type 150

Table 7-44 Diagnostic System Information Record Format

Length,in 16-bit WordsRecord Content
1Record type (150)
1Record length
1Process identification number
3Time stamp
2Job type/job number
2Type number
Up to 128Diagnostic system messages or status information

 

NOTES:

There are two different formats for type 150 diagnostic information records: one is the auto-diagnostic record format and the other is the diagnostic system information record format. You can determine which format is used by looking at the type number field just after the header.

Type Number

  • *0 = Auto-diagnostic record format

  • *3 = Diagnostic system information record format

The diagnostic system information can include information about which users requested single-user mode (SUM). It can also record internal diagnostic system errors detected when no user exists to report them to. This can occur when an I/O error is logged, for example.

High-priority machine check, type 151

Table 7-45 High-Priority Machine Check Record Format

Length, in 16-bit WordsRecord Content
1Record type (151)
1Record length
1Process identification number
3Time stamp
2Job type (bits 0-1)/job number (bits 2-15 of word 1, bits 0-15 of word 2)
2Hardware ID
2Number of bytes in record
2GR 0
2:
2GR31
2CR0
2:
2CR31
2SR0
2:
2SR7
2Interrupting instruction address space
2Interrupting instruction address offset
20 Check type word (bits 0-4 of word 1)/Reserved (bits 5-15 of word 1, bits 0-15 of word 2)
20 CPU state word (bits 0-5 of word 1)/Reserved (bits 6-15, bits 0-12 of word 2)/Past OK (bit 13 of word 2)/Error cleared (bits 14-15 of word 1, all word 2)
20 Detected by word (bits 0-2 of word 1)/Reserved (bits 3-15 of word 1, all word 2)
20 Cache check word (bits 0-3 of word 1)/Reserved (bits 4-15 of word 1, all word 2)
20 TLB check word (bits 0-4 of word 1)/Reserved (bits 5-15 of word 1, all word 2)
20 Bus check word (bits 0-9 of word 1)/Reserved (bits 10-15, all word 2)
20 Assist check word (bits 0-2 of word 1)/Reserved (bits 3-15 of word 1, all word 2)
20 Processor check word - reserved
2Reserved (all word 1, bits 0-12 of word 2)/Assist ID word (bits 13-15 of word 2)
VariesSystem-dependent portion of PIM

 

NOTES:

Fields starting with GR0 to the end of the record contain processor internal memory (PIM). Record type 151 contains HPMC PIM and record type 152 contains LPMC.

The first PIM fields contain information from the registers (such as general registers, GR0-31, and control registers, CR0-31). The length of the last PIM field (system-dependent portion of PIM) is hardware dependent. However, the total length of a logging record is restricted to 2KB. Refer to the appropriate hardware manuals for more information.

The nature of a high-priority machine check is passed by setting nonzero values in the appropriate fields of the record. The layout of these error parameters is as follows:

Check type word

BitsDefinition
0:1Cache system check
1:1TLB check
2:1Bus transaction check
3:1Assists check
4:1Processor internal check

CPU state word

BitsDefinition
0:1Interrupting instruction address queue valid
1:1Interrupting instruction address queue fault
2:1IPRs valid
3:1General registers valid
4:1Control registers valid
5:1Space registers valid

Detected by word

BitsDefinition
0:1Instruction fetch
1:1Load
2:1Load and clear
3:1Store
4:1Flush I-cache
5:1Flush D-cache
6:1Purge D-cache
7:1Copyout of dirty cache line
8:1Instruction prefetch
9:1Data prefetch
10:1Remote cache consistency check
11:1Local purge TLB
12:1Remote purge TLB
13:1Probe read access
14:1Probe write access
15:1Coprocessor operation
16:1SFU operation
17:1Insert I or D TLB protection or access

Cache check word

BitsDefinition
0:1I-cache check
1:1D-cache check
2:1Tag check
3:1Data check

TLB check word

BitsDefinition
0:1I-TLB check
1:1D-TLB check

Bus check word

BitsDefinition
0:1Address error
1:1Data slave error
2:1Data parity error
3:1Data protocol error
4:1Read transaction
5:1Write transaction
6:1Memory space transaction
7:1I/O space transaction
8:1Processor was master in transaction
9:1Processor was slave in transaction

Assists check word

BitsDefinition
0:1Coprocessor check
1:1SFU check
2:1Assist ID valid

Processor check word

All fields of this word are currently reserved.

Assist ID word

The 3-bit unit ID field of the failing SFU or coprocessor is stored right-justified in bits 29:3 of the assist ID word.

Low-priority machine check, type 152

Table 7-46 Low-Priority Machine Check Record Format

Length, in 16-bit WordsRecord Content
1Record type (152)
1Record length
1Process identification number
3Time stamp
2Job type (bits 0-1)/job number (bits 2-15 of word 1, bits 0-15 of word 2)
2Hardware ID
2Number of bytes in record
2GR 0
2:
2GR31
2CR0
2:
2CR31
2SR0
2:
2SR7
2Interrupting instruction address space
2Interrupting instruction address offset
20 Check type word (bits 0-4 of word 1)/Reserved (bits 5-15 of word 1, bits 0-15 of word 2)
20 CPU state word (bits 0-5 of word 1)/Reserved (bits 6-15, bits 0-12 of word 2)/Past OK (bit 13 of word 2)/Error cleared (bits 14-15 of word 1, all word 2)
20 Detected by word (bits 0-2 of word 1)/Reserved (bits 3-15 of word 1, all word 2)
20 Cache check word (bits 0-3 of word 1)/Reserved (bits 4-15 of word 1, all word 2)
20 TLB check word (bits 0-4 of word 1)/Reserved (bits 5-15 of word 1, all word 2)
20 Bus check word (bits 0-9 of word 1)/Reserved (bits 10-15, all word 2)
20 Assist check word (bits 0-2 of word 1)/Reserved (bits 3-15 of word 1, all word 2)
20 Processor check word - reserved
2Reserved (all word 1, bits 0-12 of word 2)/Assist ID word (bits 13-15 of word 2)
VariesSystem-dependent portion of PIM

 

NOTES:

The fields in this record are the same as the corresponding fields in the high-priority machine check record (type 151). See the notes following the record.

CM file close record, type 160

Table 7-47 CM File Close Record Format

Length, in 16-bit WordsRecord Content
1Record type (160)
1Record length
1Process identification number
3Time stamp
2Job type/job number
13File name - format of fname.group.acct
1Reserved
1Disposition (bits 0-7)/Domain (bits 8-15)
2Number of sectors allocated
1Device type (bits 0-7)/Unused (bits 8-15
2Number of records transferred
2Number of blocks transferred
1Logical device number

 

NOTES:

Close Disposition (bits 13:3)Open Domain
0 No change 0 New file
1 Save permanent 1 Old permanent file
2 Save temporary - rewound 2 Old temporary file
3 Save temp - not rewound 3 Old job or sys
4 Delete 
5 Make temporary 

Disk Space Disposition (bits 11:2)

0Do not return disk space allocated beyond EOF.
1Return disk space allocated beyond EOF to system; EOF becomes file limit.
2Return disk space allocated beyond EOF to system; file limit remains the same (NM file types only).

The Disposition field in a CM file close record can have values from 0-4, 8-12, and 255. Any files left open during process termination are closed by the system and given a disposition of 255.

Feedback to webmaster