Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RES: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syst

RES: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syst

From: Flávio Reis <freis_at_metrored.com.br>
Date: Thu, 16 Jan 2003 03:43:43 -0800
Message-ID: <F001.0053113B.20030116034343@fatcity.com>


Richard,

The IDS has a deamon running in background (by the user netrangr) and every 5 minutes a IDS trigger is called and tries to connect to Oracle. He generates an log error and the sqlnet.log is generated too...

Thanks
Flávio

-----Mensagem original-----
De: Richard Ji [mailto:richard.ji_at_mobilespring.com] Enviada em: quarta-feira, 15 de janeiro de 2003 13:54 Para: Multiple recipients of list ORACLE-L Assunto: RE: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syst

How does the IDS gets run? Do you also login as netrangr and run it or is it started during system startup through rc.d scripts?

-----Original Message-----
Sent: Wednesday, January 15, 2003 6:44 AM To: Multiple recipients of list ORACLE-L Syst

I installed IDS with a user called netrangr (the IDS manual shows it)! All Oracle variables are set in the profile of this user! If I connected in the Solaris with this user and call the sqlplus, I connect to the database allright!!!

Thanks
Flávio Reis

-----Mensagem original-----
De: Richard Ji [mailto:richard.ji_at_mobilespring.com] Enviada em: terça-feira, 14 de janeiro de 2003 17:29 Para: Multiple recipients of list ORACLE-L Assunto: RE: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syste

What's the user account you have your IDS install under? I would check your Oracle environment variables first for that account.

-----Original Message-----
Sent: Tuesday, January 14, 2003 2:19 PM
To: Multiple recipients of list ORACLE-L
(I

Hi!
I'm encountering this error when the Cisco Intrusion Detection System
(IDS)tries to connect to Oracle database (8.0.6):

"*********************************************************************
**
Fatal OSN connect error 12545, connecting to:
(DESCRIPTION=(ADDRESS=(PROTOCOL=beq)(PROGRAM=oracle)(ARGV0=oracle)
(ARGS='(DESCR

IPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))')(DETACH=NO))
(CONNECT_DATA=(CID=(PRO

GRAM=)(HOST=BR-DSPS01)(USER=netrangr))))

VERSION INFORMATION:
TNS for Solaris: Version 2.3.2.1.0 - Production Oracle Bequeath NT Protocol Adapter for Solaris: Version 2.3.2.1.0 - Pro
duction
Time: 16-DEC-02 10:58:13
Tracing not turned on.
Tns error struct:
nr err code: 12206
TNS-12206: Message 12206 not found; No message file for product=NETWORK, fac
ility=TNS
ns main err code: 12545
TNS-12545: Message 12545 not found; No message file for product=NETWORK, fac
ility=TNS
ns secondary err code: 12560
nt main err code: 515
TNS-00515: Message 515 not found; No message file for product=NETWORK, facil
ity=TNS
nt secondary err code: 2
nt OS err code: 0"
"

The tnsnames and listener of Oracle are correctly configured to answer via BEQUEATH, TCP and IPC! They (ORACLE and IDS) are in the same machine, and via shell I can connect to the database (HP OpenView is installed in the machine too, and he connects to the database without problems)! The OS is Solaris 8!

Someone knows how I can solve this?

Thank you very much!

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: =?iso-8859-1?Q?Fl=E1vio_Reis?=
  INET: freis_at_metrored.com.br

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L

(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Richard Ji INET: richard.ji_at_mobilespring.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?iso-8859-1?Q?Fl=E1vio_Reis?= INET: freis_at_metrored.com.br Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Richard Ji INET: richard.ji_at_mobilespring.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?iso-8859-1?Q?Fl=E1vio_Reis?= INET: freis_at_metrored.com.br Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Thu Jan 16 2003 - 05:43:43 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US