1,160 pts.
 Is it possible to track how the tcp routing entries got deleted?
Suddenly after one of my tcp ip interface went into recovery i found few tcpip routes missing. Is it possible to find from the Audit journals how the tcp routing entries got deleted, are they tracked in the audit logs?

Software/Hardware used:
audit journal, iseries, as400
ASKED: October 10, 2011  11:07 AM
UPDATED: October 11, 2011  4:51 AM

Answer Wiki:
Last Wiki Answer Submitted:  Be the first to answer this question.
All Answer Wiki Contributors:  Be the first to answer this question.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

I think you can check it from the journals

 15,485 pts.

 

I’m not aware of any audit function specific to TCP/IP routes.

I’m also not good enough at TCP/IP configuration to know how removing a route would cause an interface failure. I don’t know of any reason that an interface relies on the existence of a route.

Can you give a little more description of your circumstances? Loss of a route shouldn’t be a major problem unless maybe it was a default route. It might help if you explain why you had the routes in the first place. (Or were they dynamic routes?)

Tom

 108,055 pts.