Re: Logging of SQL statements

Hi Jens,

Have a look at a paper i wrote recently called "Detecting SQL injection in Oracle" which talks about some of the possible ideas to catch SQL as it is sent to the database. Also have a look at another paper i wrote called "An introduction to simple Oracle auditing" which may be of some use to you. You can find them at http://www.petefinnigan.com/orasec.htm

Kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.