Hi all, apologize for the late reply. I just back with more information as I am performing a DCRUM poc for government.
Address to Roman question, the customer IT Ops is looking at only agentless solution as putting agent into mainframe would increase the scope which IT Ops cannot manage and would make the whole PoC scope difficult to manage as it would require another team. furthermore, it is a production mainframe, planting agent into mainframe would really complicate alot of things.
Address to ulf, as there's communication between the Web/App Server directly to the mainframe using MS HIS which talk using SNA traffic. However, as this is a Ethernet based network. The SNA traffic is delivery through using UDP protocol. In the PoC, I am able to capture the UDP traffic communciation between the Web/App -> Mainframe but due to the UDP as sessionless protcol, there's not much value. Hence, if we can decode the UDP and SNA traffic which I am not sure would provide additional insight and value to customer ?.
It looks like you have come to a dead end. If it hadn't been UDP, you could have used the Universal Decode but that requires TCP.
In the predecessor to DCRUM we had a SNA decode, but frankly, there's isn't that much of that protocol in the open today. Most of the traffic is through SOAP/XML over HTTP or MQ. Rarely do actual SNA traffic pass by a AMD.
The HIS can do TCP/IP too but in your case it's not the case, unfortunately.