Re: tracing of waht the oracle client does.

Hi,

have a look on my site http://www.petefinnigan.com/tools.htm there is a link to a tool called ocispy that logs all OCI calls issued by an application to a trace file, the SQL is included (I have tested this tool but found it to be unstable sometimes). Also you could use SQL*Net trace and get the SQL that way. There is an example on how to do this in my paper "Detecting SQL Injection in Oracle" which you can find at http://www.petefinnigan.com/orasec.htm - in the same paper there is an example of using snoop to sniff network packets. Also you can use SQL trace by setting the 10046 event. I have a paper that includes many ways to set trace for your own session or another users session and also to set the relevant levels to get binds or waits. Its at http://www.petefinnigan.com/ramblings/how_to_set_trace.htm

hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.