Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: URGENT Help on tracking unauthorized login to Oracle Database

Re: URGENT Help on tracking unauthorized login to Oracle Database

From: Joseph S Testa <teci_at_the-testas.net>
Date: Fri, 08 Feb 2002 11:42:18 -0800
Message-ID: <F001.0040AA48.20020208113916@fatcity.com>

I stand by my original statement, look at auditing unsuccessful connections.

joe

Mandal, Ashoke wrote:

>Joe,
>
>We referred the auditing option. My understanding is that you can track the oracle
>users using database auditing feature once the users are logged into the database.
>
>But my requirement is to track the users who tried to login to the database but could
>not login due to wrong password.
>
>For example, somebody may know the connect string for an oracle database and trying
>to login to the database as system user and with various combination of password. We
>like to know who are these users.
>
>Thanks,
>Ashoke
>
>-----Original Message-----
>Sent: Friday, February 08, 2002 11:54 AM
>To: Multiple recipients of list ORACLE-L
>Database
>
>
>Administrators guide
>
>chapter on auditing.
>
>joe
>
>Mandal, Ashoke wrote:
>
>>>Greetings,
>>>
>>>We have a database with very sensitive data. Our management wants me to find out
>the way to secure this data from unauthorized login and track these users who tried
>to login to this database.
>>>
>>>Is there any way we can track the unauthorized users, who try to login to an oracle
>database with invalid userid or password but with valid connect string.
>>>
>>>If there is no options under oracle then is there any 3rd party software for this
>purpose.
>>>
>>>Any help is appreciated
>>>
>>>Thanks,
>>>Ashoke
>>>
>
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Joseph S Testa
  INET: teci_at_the-testas.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Fri Feb 08 2002 - 13:42:18 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US