Audit Connection Stop
struct ae_connstop {
unsigned short ae_cp_compname; /* offset */
unsigned short ae_cp_username; /* offset */
unsigned short ae_cp_netname; /* offset */
unsigned short ae_cp_connid;
unsigned short ae_cp_reason;
};
where:
- ae_cp_compname is an offset (from the beginning
address of the ae_connstop data structure) to an ASCIIZ string indicating
the requester that established the session.
- ae_cp_username is an offset (from the beginning
address of the ae_connstop data structure) to an ASCIIZ string indicating
the name of the user who initiated the session. If 0, ae_cp_username
and ae_cp_compname are the same.
- ae_cp_netname is an offset (from the beginning
address of the ae_connstop data structure) to an ASCIIZ string indicating
the connected netname of the resource.
- ae_cp_connid is the connection identification
number.
- ae_cp_reason is one of three values indicating
why the session was disconnected. These values, defined in the AUDIT.H header
file, mean the following: ┌────────────────────┬───────┬─────────────────────────────────────────────────┐
│ SYMBOLIC CONSTANT │ VALUE │ MEANING │
├────────────────────┼───────┼─────────────────────────────────────────────────┤
│ AE_NORMAL │ 0 │ Normal disconnection, or user name limit. │
├────────────────────┼───────┼─────────────────────────────────────────────────┤
│ AE_SESSDIS │ 1 │ Error, session disconnect, or bad password. │
├────────────────────┼───────┼─────────────────────────────────────────────────┤
│ AE_UNSHARE │ 2 │ Autodisconnect (timeout), share removed, or │
│ │ │ administrative permissions lacking. │
└────────────────────┴───────┴─────────────────────────────────────────────────┘
[Back: Audit Connection Start]
[Next: Audit Connection Reject]