Hello,
I'd like to generate some reports on users log in and log out
times, is there a way to do this with/without using smbd log files?
I was looking at the log files and it looks like I can determine the
time of login by looking for :
[2006/02/10 09:31:46, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
Got user=[jsmith] domain=[CORP] workstation=[DHCP31247] len1=24 len2=24
there is log activity later on in the day, around 5PM which I'm sure
is the client updating the profile as they log off. Is it safe to
assume when I see the lines marked "*A*", any subsequent lines after
that are related to the client logging off and updating the profile? My
understanding is the profile server should only be contacted from a
client when it is reading its profile (login) and writing out the
profile during log off, is this correct?
. *A* [2006/02/13 09:50:10, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
. *A* Got user=[jsmith] domain=[CORP] workstation=[DHCP31247] len1=24
len2=24
. [2006/02/13 17:18:54, 3] smbd/oplock.c:init_oplocks(1302)
. open_oplock_ipc: opening loopback UDP socket.
. [2006/02/13 17:18:54, 3]
smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
. Linux kernel oplocks enabled
. [2006/02/13 17:18:54, 3] smbd/oplock.c:init_oplocks(1333)
. open_oplock ipc: pid = 17375, global_oplock_port = 35230
. [2006/02/13 17:18:54, 3] smbd/process.c:process_smb(1092)
. Transaction 0 of length 137
thanks for your time,
greg
