HP OpenVMS Systems

DECnet EVL and Security Audits?

» close window

The Question is:

 
I'm getting the following message in opcom and it keeps scrolling.  Is there a
 cause for this or a way to turn it off.
 
%%%%%%%%%%%  OPCOM  10-AUG-2004 09:56:48.37  %%%%%%%%%%%
Message from user AUDIT$SERVER on SHARE2
Security alarm (SECURITY) and security audit (SECURITY) on SHARE2, system id: 10
64
Auditable event:          Network login
Event time:               10-AUG-2004 09:56:48.37
PID:                      2460CC20
Process name:             EVL
Username:                 DECNET
Process owner:            [1,4]
Image name:               $1$DUA0:[SYS0.SYSCOMMON.][SYSEXE]LOGINOUT.EXE
 
As for auditing I have:
 
System security alarms currently enabled for:
  ACL
  Authorization
  SYSGEN
  NCP
  Audit:         illformed
  Breakin:       dialup,local,remote,network,detached
  Login:         dialup,network
  Logfailure:    batch,dialup,local,remote,network,subprocess,detached
 
System security audits currently enabled for:
  ACL
  Authorization
  SYSGEN
  Audit:         illformed
  Breakin:       dialup,local,remote,network,detached
  Login:         dialup,local,remote,network
  Logfailure:    batch,dialup,local,remote,network,subprocess,detached
  FILE access:
    Failure:     read,write,execute,delete,control
 
This is running in a homogenous cluster and both systems are being hit by this.
 
Any suggestions would be appreciated.
 
Thanks,
Mike

The Answer is :

 
  Something is triggering the DECnet event logger and quite possibly
  triggering a failure within the event logger, and your goal is to
  find the trigger.
 
  Please ensure you have the current ECOs for OpenVMS and for DECnet
  loaded, as a start, and please then contact the customer support
  center directly -- details of the EVL configuration and access to
  any dump files or logs will be of interest.
 

  

     

     
answer written or last revised on ( 11-AUG-2004 )
     
» close window