Well, a centralized monitoring tool is in development right now at NetApp, but another easier approach would be to leverage auditing on shares, possibly tracking on "successful mounting of a share" events.  That way, you would know each time a share is mounted, who did it, etc.
-----Original Message-----
From: Monica Lam [mailto:Monica.Lam@cosinecom.com]
Sent: Tuesday, March 06, 2001 11:05 AM
To: 'White, Lance'; 'toasters@mathworks.com'
Subject: RE: Is there a way to tell who is mapping specific filer cifs sha res?

Thanks.  Actually, I was hoping for a simpler way to gather the
information on all the user's who are mapping shares and which shares
at a specific time. 
 
For instance, if an extra parameter can be added to the
cifs sessions command (verbose maybe) that would also display
the shares the users are using at the same time.  That way
I wouldn't have to run cifs sessions username on each user
that has an open session.
 
Also, since the information is available in the NT server manager,
I thought maybe someone might have the command line to get
that information from NT.
 
If there isn't such a thing, then I guess a script that takes the output
from cifs sessions that parses out the username and then runs the
cifs session username will be the way to go.
 
Thanks
-----Original Message-----
From: White, Lance [mailto:Lance.White@netapp.com]
Sent: Tuesday, March 06, 2001 10:49 AM
To: Monica Lam; 'toasters@mathworks.com'
Subject: RE: Is there a way to tell who is mapping specific filer cifs sha res?

Do this via rsh command to a Filer, or on the Filer itself.

Displaying CIFS session information

CIFS session information you can display

You can display information about connected users and the number of shares and open files for each user. You can also display information about a specific connected user.

Displaying information with the cifs sessions command

The cifs sessions command syntax is as follows:

cifs sessions <username>
Displaying information about all connected users

To display information about all connected users, use the following command syntax:

cifs sessions

Sample output is

Server Registers as 'TOASTER` in group WNT-DOMAIN

WINS Server: 272.320.0.4

PC style Access Control is being used

Using domain controller WNT-DOMAIN-PDC for authentication

========================================

PC (user)           #shares       #files

SMITHPC (qsmith)      1             1

PETERSPC (zpeters)    2             3
Displaying information about one user

To display the information for a particular user, specify the user name in the command; for example:

cifs sessions ghopper

users

    shares/files opened

  HALEY-HOME1   (ghopper)

    ENG-USERS

             Read-denyW   - 
\GHOPPER\SRC\PROD\COMMON\HTTPD\httpd_fast.c

  HALEY-PC      (ghopper)

    ENG-USERS


    
Displaying connected user security information

    
To display security information for each connected user, use cifs 
    sessions with the -s option. After the first two lines, 
    detailed information for each connected user is displayed. The following 
    example lists only one user.
cifs sessions -s

users

  Security Information

 

HOLARD-PC     (root)                   

        ***************

        UNIX uid = 0

        user is a member of group daemon (1)

        user is a member of group www (204)

        user is a member of group well (0)

        user is a member of group http (500)

 

        NT membership

                WNT-DOMAIN\root

                WNT-DOMAIN\Domain Users

                WNT-DOMAIN\Domain Admins

                WNT-DOMAIN\SU Users

                WNT-DOMAIN\Installers

                BUILTIN\Users

                BUILTIN\Administrators

        User is also a member of Everyone, Network Users,

        Authenticated Users

        ***************


    

      
-----Original Message-----
From: Monica Lam 
      [mailto:Monica.Lam@cosinecom.com]
Sent: Tuesday, March 06, 2001 
      10:29 AM
To: 'toasters@mathworks.com'
Subject: Is 
      there a way to tell who is mapping specific filer cifs 
      shares?


      
Hi, 

      
We want to intermittantly capture data on which 
      users are mapping 
which cifs shares off 
      of our filers.  Any one familiar with a command 
line way of doing this, either from NT or solaris or the 
      Network Appliance itself?   

      
(The information shows up in the NT server 
      manager, but it is not very useful 
in 
      terms of capturing trends...) 

      
Thanks!