Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: some process flooding oracle's .sh_history file

Re: some process flooding oracle's .sh_history file

From: Steve Howard <stevedhoward_at_gmail.com>
Date: Tue, 31 Jul 2007 20:43:48 -0000
Message-ID: <1185914628.216598.215350@d30g2000prg.googlegroups.com>


On Jul 31, 4:33 pm, EdStevens <quetico_..._at_yahoo.com> wrote:
> On Jul 31, 2:39 pm, sybra..._at_hccnet.nl wrote:
>
>
>
> > On Tue, 31 Jul 2007 11:02:36 -0700, EdStevens <quetico_..._at_yahoo.com>
> > wrote:
>
> > >Platform: Oracle 10.2.0.2.0 on HP-UX B.11.11
>
> > >This began just recently. While logged on to the sever with the
> > >'oracle' account, I noticed my command line history returning a bunch
> > >of stuff I hadn't entered. This is a very small shop, so I have a
> > >pretty good feel for when someone else may be logged on, and the
> > >commands in the history didn't look like anything any of us would have
> > >entered at the command line.
>
> > >Looking into oracle's .sh_history file, I found scores of entries like
> > >this:
>
> > >2 echo Start Command;LC_ALL=C;export LC_ALL;netstat -i; echo Finish
> > >Command
> > >3 echo Start Command; LC_ALL=C;export LC_ALL;/etc/swapinfo -t | grep
> > >total;echo Finish Command
>
> > >( I've left the vi line numbers, to deliniate individual records.)
>
> > >Looks like something the dbcontrol agent would be doing to gather
> > >stats, but if so, I've never seen it show up in the .sh_history file
> > >before.
>
> > >Anyone seen anything like this, or have and educated idea?
>
> > You could of course have
> > HISTFILE=<any filename>$$
> > in your profile.
>
> > --
> > Sybrand Bakker
> > Senior Oracle DBA
>
> Yes, but I'd like to find out where this history is coming from, not
> simply how to dodge it.

You could set your HISTFILE variable to something like...

export HISTFILE=`echo $(who am i) | cut -f2 -d\( | cut -f1 -d\)`

which would set it to the remote machine from which the user has logged in.

HTH, Steve Received on Tue Jul 31 2007 - 15:43:48 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US