Reference Guide

37
HP Medical Archive
Message Reference
ETCA—TCP/IP Connection Establish
When a connection to a service running on a node is permitted, this
message is generated.
This audit message means an incoming or outgoing TCP/IP connection
was successfully established. This does not indicate the corresponding
user was permitted to use the service - just that they were not rejected.
Typically, each service implements additional authentication mecha-
nisms specific to the service type (DICOM, HTTP etc.).
This message can be used to report on external hosts communicating
with the system, and to correlate higher level protocol messages back
to the IP address initiating the activity. The “Connection Identifier”
field allows correlation of audit messages related to actions performed
during a session.
Table 29: ETCA—TCP/IP Connection Establish Fields
Code Field Description
SEID Service Identifier The unique identifier of the service to which the connec-
tion was established.
CNDR Connection
Direction
Indicates whether the connection was opened by the grid
node or by a remote host:
INBO—connection initiated by a remote host, which con-
nected to the node
OUTB—connection initiated by the grid node, which
connected to a remote host
SVIP Destination Service
Port
The port the connection was established to.
DAIP Destination IP
Address
The IP address the connection was established to.
SAIP Source IP Address The IP address the connection was established from
(local IP address).
CNID Connection
Identifier
The unique identifier of the connection.
RSLT Result Code Connection status:
SUCS—connection successfully established