RE: WHO DID IT?

On unix have a look for lastlog, sulog, utmp, utmpx - may be under var/adm. This may help to find who was logged in at the time. What about your network people ask if they can help. How many people have the privileges required. It could be bright lights and thumb screws time.

Phil West
Unix Sys Admin and Oracle Financials DBA +44 (0) 20 7623 5222 x5221

-----Original Message-----
From: David Barbour [mailto:DBarbour_at_connectsouth.com] Sent: 17 August 2000 01:45
To: Multiple recipients of list ORACLE-L Subject: RE: WHO DID IT?

If you're on UNIX, check to see if the sysadm has any kind of logging/command history on users.

David A. Barbour
Oracle DBA - ConnectSouth
512-681-9438
dbarbour_at_connectsouth.com

-----Original Message-----
Sent: Wednesday, August 16, 2000 5:47 PM To: Multiple recipients of list ORACLE-L

a production database has misteriously lost all of its data...I can re-create it
from backup but before I do I'd like to find out who was the last person to access certain tables in order to find out who truncated everything...does anyone have a method to find the culprit?

thanks in advance...
super-sluth...:)

-- 
Author: Roy Ferguson
  INET: rferguso_at_level1.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).
-- 
Author: David Barbour
  INET: DBarbour_at_connectsouth.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).


*******************************************************************************
The information in this Internet e-mail is confidential and may be legally privileged.  It is intended solely for the addressee.  Access to this Internet e-mail by anyone else is unauthorised and any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. 
 When addressed to our clients any opinions or advice contained in this Internet e-mail are subject to the terms and conditions expressed in any applicable documentation or market practices governing the relationship between Garban Intercapital plc and its clients.

Any views expressed in this message are those of the individual sender except where they are stated to be the views of Garban Intercapital plc.
*******************************************************************************