Re: Verifying encryption is working? (Oracle 8i, Win2k server)

"Pete Finnigan" <plsql_at_petefinnigan.com> wrote in message news:RxpkUiB2oPSARxzp_at_peterfinnigan.demon.co.uk...
> >If you are on a UNIX variant, you can use snoop (man snoop) and it will
also
> >be OK, but not as user friendly.
> >
> Hi,
>
> There is an example of how to use snoop in a paper i wrote called
> "Detecting SQL injection in Oracle" available on my website at
> http://www.petefinnigan.com/orasec.htm - My paper also has an example of
> using SQL*Net trace level 16 as Rick suggests.
>
> on the other hand you should follow Ricks advice as I think he designed
> and implement the advanced security for Oracle.
>
> hth
>
> Kind regards
>
> Pete
> --
> Pete Finnigan
> email:pete_at_petefinnigan.com
> Web site: http://www.petefinnigan.com - Oracle security audit specialists
> Book:Oracle security step-by-step Guide - see http://store.sans.org for
details.

Pete, thanks for the information! Great articles, by the way! As I just wrote back to Rick, the packet dump from the trace file showed me that yes, the data encryption is working. If I had known it was so easy, I would've done this a long time ago!

Thanks,

-Thomas Received on Mon Mar 08 2004 - 17:34:08 CST