From rdmorton@switch.com Wed, 16 May 2001 03:27:03 -0700
From: "Morton, Ronald D" <rdmorton@switch.com>
Date: Wed, 16 May 2001 03:27:03 -0700
Subject: RE: From SID to connected machine
Message-ID: <F001.003049DC.20010516031550@fatcity.com>
MIME-Version: 1.0
Content-Type: text/plain
Title: From SID to connected machine



<SPAN 
class=920101810-16052001>Linda,
<SPAN 
class=920101810-16052001> 
Have 
you checked the v$session view?  I believe that it shows the OS user and 
machine associated with the session id.
Hope 
this helps.
<SPAN 
class=920101810-16052001> 
<SPAN 
class=920101810-16052001>Ron

  <FONT face=Tahoma 
  size=2>-----Original Message-----From: Hagedorn, Linda 
  [mailto:lindah@epocrates.com]Sent: Tuesday, May 15, 2001 9:56 
  PMTo: Multiple recipients of list ORACLE-LSubject: From 
  SID to connected machine
  Hello, 
  I'm looking to trace a sid from oracle to a pid on 
  unix to a connection/socket/port to another machine.  Server is Sun 
  Solaris 2.8.
  I'm trying to deimplement a userid and there is a 
  connect string to it buried somewhere on one or more of eight different 
  application machines.  The engineers have looked for the connection, but 
  are unable to find it.  I need to tell them which machine it's coming 
  from.  If anyone has the steps to do this, I'd appreciate a note 
  back.  I've tried to match the pid to the lots of logs, but cannot find a 
  match.  
  Thank you very much.  Any information or 
  referral to documentation is appreciated. 
  Linda 
  The userid connection on topsessions: 
  PALMAPP     SID 149 
  PALMAPP     SID  
  58 PALMAPP     SID 
  129 PALMAPP     SID 
  204 PALMAPP     SID 
  158 
  The netstat output.  I believe the connection 
  is coming from either va8 or va11.  
  kong.epocrates.com.1521 
  va8.epocrates.com.4501 32120      0 
  10136      0 ESTABLISHED <FONT 
  face="Courier New" size=2>kong.epocrates.com.1521 va8.epocrates.com.4502 
  32120      0 10136      0 
  ESTABLISHED kong.epocrates.com.1521 
  va8.epocrates.com.4503 32120      0 
  10136      0 ESTABLISHED <FONT 
  face="Courier New" size=2>kong.epocrates.com.1521 va8.epocrates.com.4504 
  32120      0 10136      0 
  ESTABLISHED kong.epocrates.com.1521 
  va8.epocrates.com.4505 32120      0 
  10136      0 ESTABLISHED <FONT 
  face="Courier New" size=2>kong.epocrates.com.1521 va11.epocrates.com.4117 
  32120      0 10136      0 
  ESTABLISHED kong.epocrates.com.1521 
  va11.epocrates.com.4118 32120      0 
  10136      0 ESTABLISHED <FONT 
  face="Courier New" size=2>kong.epocrates.com.1521 va11.epocrates.com.4119 
  32120      0 10136      0 
  ESTABLISHED kong.epocrates.com.1521 
  va11.epocrates.com.4121 32120      0 
  10136      0 ESTABLISHED <FONT 
  face="Courier New" size=2>kong.epocrates.com.1521 va11.epocrates.com.4122 
  32120      0 10136      0 
  ESTABLISHED 
    



