Re: error 12560 causing webservices slowdown

Roy M wrote:
> NOTE: in all logs we just replaced real host names with XXXX
>

Why?

>
> (DESCRIPTION=(ADDRESS=(PROTOCOL=BEQ)(PROGRAM=oracle)(ARGV0=oracleORCL)(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))'))(CONNECT_DATA=(SID=ORCL)(CID=(PROGRAM=D:\CFusion\Bin\cfserver.exe)(HOST=xxxxxx)(USER=SYSTEM))))

(ARGV0=oracleORCL) indicates you have ORCL set as SID.

> PRODUCTION.XXXXXX =
> (DESCRIPTION =
> (ADDRESS_LIST =
> (ADDRESS = (PROTOCOL = TCP)(HOST = XXXXXX)(PORT = 1521))
> )
> (CONNECT_DATA =
> (SID = FPROD)
> )
> )

This is a different SID!
It suggests your ColdFusion environment settings are defaulted (ORCL would be a default SID), so change them. Also, system would be an extremely bad idea.

Another possibility is, of course, you are being hacked.
> ---------------------------------------------------------------
>
> the listener.ora on the DB server has no BEQ protocol either. Here it
> is:

No of course not!
BEQUEATH is a direct call (any c or Unix-programmer recognizes ARGV0 and ARGS) - you don't even *need* a listener for BEQueath connections, just the correct environment variables (ORACLE_HOME and ORACLE_SID)

-- 
Regards,
Frank van Bortel

Top-posting is one way to shut me up...