Hi, I grep for the username and i found the data in the log file and found out which session id it belongs, i will give you a sample of the output--

Tue May 19 23:46:29.946 2009 Morocco Standard Time INFO:    pid 2172 t
+id 688: 17: 10088781: ArAuthFrameworkImpl::doPreAuth::1:10088781:: Au
+thentication mechanism returned [0] for AuthIdentity [01402629;ARCARD
+]
Tue May 19 23:47:14.165 2009 Morocco Standard Time INFO:    pid 2172 t
+id 3352: 17: 10088815: ArAuthFrameworkImpl::doPostAuth::1:10088815:: 
+Authentication mechanism returned [1] for AuthIdentity [01402629]
[download]

here 10088781,10088815 are the session id's related to this user id. i used this code to find it out

#!/usr/bin/perl -w
$username = "01402629";
open(VALUE, "< arcotwebfort_20May09_00_03_55.log");
@stock = <VALUE>; 
@matches = (grep(/$username/, @stock));
print @matches;
[download]

i need some help in finding out this session-id is related to what mechanism, as i mentioned earlier there are OTPAuthentication,QnA and UPauth,so beased on the session-id i need to print which mechanism he belongs and what did he do in that with time stamps. Sory to bother you but u can copy that log file in some etxt file and wrapped the data. Thanks NT