Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
![]() |
![]() |
Home -> Community -> Mailing Lists -> Oracle-L -> RE: dba_audit_session -- finding process?
Unfortunately, it's a Windows 2003 server that was just assigned to me.
Besides, it just seems that there must be someway from an auditing
perspective to find out more about what is actually happening versus just
who it is trying to login. Just for the knowledge, I would like to try to
find out more about what they are trying to do.
>From: "Powell, Mark D" <mark.powell_at_eds.com>
>To: <cemail_219_at_hotmail.com>, <oracle-l_at_freelists.org>
>Subject: RE: dba_audit_session -- finding process?
>Date: Wed, 29 Mar 2006 09:59:23 -0500
>
>
>If you are on a UNIX based system I would suggest checking both Oracle
>and the root cron jobs (again) for a job that is logging on with the
>system username.
>
>HTH -- Mark D Powell --
>
>
>-----Original Message-----
>From: oracle-l-bounce_at_freelists.org
>[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of J. Dex
>Sent: Wednesday, March 29, 2006 9:47 AM
>To: oracle-l_at_freelists.org
>Subject: dba_audit_session -- finding process?
>
>Is there anyway to map sessionid (or any other parameter) from
>dba_audit_session to a specific process to get more information on what
>it actually is that is running? My system password keeps locking up so
>I turned on auditing. I can see by error 1017 that it is due to invalid
>login/password but can't tell what is trying to access the database
>using the invalid login/password. We recently changed the password so I
>suspect it is a script but I am not sure. I am also open to any other
>ways of solving this problem. I recently took over this server and may
>just not know where all of the scripts, etc. are even though I thought I
>found everything.
>
>_________________________________________________________________
>On the road to retirement? Check out MSN Life Events for advice on how
>to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement
>
>--
>http://www.freelists.org/webpage/oracle-l
>
>
-- http://www.freelists.org/webpage/oracle-lReceived on Wed Mar 29 2006 - 09:14:12 CST
![]() |
![]() |