Re: verifying network encryption on 11gR2?

From: Jeff C <backseatdba_at_gmail.com>
Date: Fri, 17 Jan 2014 21:09:32 -0800
Message-ID: <CAKsxbLpsNePrN0CL37wqD4jr-qj+4B6d=39vBbsYz01Zqpq6hQ_at_mail.gmail.com>

Try using Wireshark. You can pretty easily see the different when network encryption is on versus off. You will see plain text and then a bunch of scrambled data.

On Fri, Jan 17, 2014 at 6:41 PM, Adric Norris <landstander668_at_gmail.com>wrote:

> Is there a good way to check, from within the database, whether or not
> database sessions are utilizing network encryption? I know you can look at
> the *network_service_banner* column of *v$session_connect_info*, but the
> text format makes it difficult to parse effectively... not to mention that
> I'm not certain that it's always populated (thinking of JDBC thin clients
> here). The databases in question are all 11.2.0.3/11.2.0.4, running
> under a combination of Linux X86-64 and Solaris SPARC 64-bit.
>
> We're thinking of enabling opportunistic network encryption in the near
> future, with the goal of it eventually becoming mandatory. I'd therefore
> like to be able to identify plaintext sessions from within the database, so
> that we have an idea of which applications / groups will need to make
> configuration changes.
>
> Thanx!
>
> --
>
> Awk! Pieces of eight. Pieces of eight. Pieces of seven... ERROR: kernel
> panic [parroty error]
>
>

--
http://www.freelists.org/webpage/oracle-l

Received on Sat Jan 18 2014 - 06:09:32 CET