Return-Path: <oracle-l-bounce@freelists.org>
Delivered-To: 2-oracle-l@orafaq.com
Received: (qmail 18721 invoked from network); 8 Aug 2006 03:20:01 -0500
Received: from freelists-180.iquest.net (HELO turing.freelists.org) (206.53.239.180)
  by 69.64.49.119 with SMTP; 8 Aug 2006 03:20:01 -0500
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 111933BBD8F;
 Tue,  8 Aug 2006 04:19:45 -0400 (EDT)
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 32334-05; Tue, 8 Aug 2006 04:19:45 -0400 (EDT)
Received: from turing (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 89F503B854E;
 Tue,  8 Aug 2006 04:19:44 -0400 (EDT)
Received: with ECARTIS (v1.0.0; list oracle-l); Tue, 08 Aug 2006 04:18:55 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id BB06C3BBDAF
 for <oracle-l@freelists.org>; Tue,  8 Aug 2006 04:18:55 -0400 (EDT)
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 31985-08 for <oracle-l@freelists.org>;
 Tue, 8 Aug 2006 04:18:55 -0400 (EDT)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.185])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 5D74E3BBCDF
 for <oracle-l@freelists.org>; Tue,  8 Aug 2006 04:18:55 -0400 (EDT)
Received: by nf-out-0910.google.com with SMTP id c29so144094nfb
        for <oracle-l@freelists.org>; Tue, 08 Aug 2006 01:19:10 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=BLfPWaA7VVlh/DAkUPK9Uwf1AUUUCfasV5mExS7mRKD1/aD01kecak0UigWh6vJomuykfBic1SCi+x+6scTIKrEGsM8Jrez53TdLnwxVRA7DBajA981VOnCWlT1vlnkr5H9f3JGvgqfbTiYrFCi3a8MKrQAoEQx0AlGBtxB+7wk=
Received: by 10.78.175.8 with SMTP id x8mr2655530hue;
        Tue, 08 Aug 2006 01:19:10 -0700 (PDT)
Received: by 10.78.126.9 with HTTP; Tue, 8 Aug 2006 01:19:09 -0700 (PDT)
Message-ID: <c2213f680608080119o56a294d7s5495b6df7a5ec7bc@mail.gmail.com>
Date: Tue, 8 Aug 2006 10:19:09 +0200
From: "Alex Gorbachev" <gorbyx@gmail.com>
To: lawrence.wolfson@acxiom.com
Subject: Re: Oracle Auditing Recommendations
Cc: oracle-l@freelists.org
In-Reply-To: <B39B7B7D8C8CEA419D0ED45FD7FA4C53017A4F85@CWYMSX06.Corp.Acxiom.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Disposition: inline
References: <B39B7B7D8C8CEA419D0ED45FD7FA4C53017A4F85@CWYMSX06.Corp.Acxiom.net>
X-archive-position: 37856
X-ecartis-version: Ecartis v1.0.0
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
X-original-sender: gorbyx@gmail.com
Precedence: normal
Reply-to: gorbyx@gmail.com
X-list: oracle-l
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at avenirtech.net

You should have a look at DBA_AUDIT_SESSION. Obviously, AUDIT_TRAIL
must be set to DB.


2006/8/7, Wolfson Larry - lwolfs <lawrence.wolfson@acxiom.com>:
>         I looked at AUD$ thinking I'd see the osusers/servers and see if
> any weren't coming from valid osusers/servers.  But all I saw was
> userhost and that not populated.


-- 
Best regards,
Alex Gorbachev

http://blog.oracloid.com
--
http://www.freelists.org/webpage/oracle-l


