Path: news.easynews.com!newsfeed1.easynews.com!easynews.com!easynews!cyclone1.gnilink.net!wn11feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi.com!rwcrnsc53.POSTED!not-for-mail From: "Michael J. Moore" Newsgroups: comp.databases.oracle.server Subject: Simple Oracle Net Security Question Lines: 12 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: NNTP-Posting-Host: 12.234.158.148 X-Complaints-To: abuse@attbi.com X-Trace: rwcrnsc53 1034287202 12.234.158.148 (Thu, 10 Oct 2002 22:00:02 GMT) NNTP-Posting-Date: Thu, 10 Oct 2002 22:00:02 GMT Organization: AT&T Broadband Date: Thu, 10 Oct 2002 22:00:02 GMT Xref: newsfeed1.easynews.com comp.databases.oracle.server:163792 X-Received-Date: Thu, 10 Oct 2002 14:59:57 MST (news.easynews.com) Assume I am using REMOTE_LOGIN_PASSWORDFILE = EXCLUSIVE and I have properly set up the password file. I then connect to my database from a remote client using sql*plus. Furthermore Oracle Net is set up using a typical TCP/IP connection. So, my question is, is that connection to the database considered to be secure or could anybody with a sniffer easily see commands that I am sending and data that is being returned? Thanks, Mike