Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Connection auditing

Re: Connection auditing

From: <sfaroult_at_oriole.com>
Date: Wed, 30 May 2001 12:42:43 -0700
Message-ID: <F001.003145F5.20010530124306@fatcity.com>

"Hillman, Alex" wrote:
>
> I am interested to find info about connections with wrong userid/password -
> which userid/password were used and other tns errors. For example if
> tnsnames group use wrong sid - it will be recorded in listener.log. I did
> not try tracing - maybe somebody did it alredy.
>
> Alex Hillman
> --

Alex,

   There is a possible solution, which would be using 'netcat' - a hacker tool, but a useful one. You can probably (I have not tried it) use it as a front-end to the listener and intercept everything sent to the listener (I have once used it to see what was going on during exchanges). The only snag is that you would also catch GOOD passwords :-)

-- 
Regards,

Stephane Faroult
Oriole Corporation
Voice:  +44  (0) 7050-696-269 
Fax:    +44  (0) 7050-696-449 
Performance Tools & Free Scripts
--------------------------------------------------------------
http://www.oriole.com, designed by Oracle DBAs for Oracle DBAs
--------------------------------------------------------------
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: sfaroult_at_oriole.com
  INET: sfaroult_at_oriole.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Wed May 30 2001 - 14:42:43 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US