RE: security related URGENT******

RE: security related URGENT******

 

  

Can anyone Pls tell me how can I get the username and terminal when somebody
is no more in session and done something which I can find out from
v$sql.....
Khalid

-----Original Message-----
From: Raviraj [mailto:Ravi.[Email Address Removed] Friday, May 31, 2002 2:48 PM
To: LazyDBA.com Discussion
Subject: RE: security related URGENT******


You are right
I messed it up.
I wanted to answer the original question.
I mean v$process table will give the username, terminal and the program
name.


-----Original Message-----
From: Rahul [mailto:[Email Address Removed] Friday, May 31, 2002 2:37 PM
To: LazyDBA.com Discussion; 'Raviraj'
Cc: 'Ravi.[Email Address Removed] RE: security related URGENT******


wrong !! the ADDR of v$process is the process address of the user, not the
SQL address !!

....where v$process.addr = v$session.paddr ....


> ----------
> From: Raviraj[SMTP:Ravi.[Email Address Removed] Sent: Friday, May 31, 2002 3:58 PM
> To: LazyDBA.com Discussion
> Subject: RE: security related URGENT******
>
> itz the process address. try the following
>
> select * from v$process where addr in (select address from v$sql)
> select * from v$process where addr in (select child_address from v$sql)
>
> -----Original Message-----
> From: khalid qazi [mailto:[Email Address Removed] Sent: Friday, May 31, 2002 2:18 PM
> To: LazyDBA.com Discussion
> Subject: RE: security related URGENT******
>
>
> Hi All,
>
> Can anybody tell me whats "address" column in v$sql and how can I evaluate
> it??????????????
>
> Khalid
>
> -----Original Message-----
> From: Rahul [mailto:[Email Address Removed] Sent: Friday, May 31, 2002 2:02 PM
> To: LazyDBA.com Discussion; 'khalid qazi'
> Subject: RE: security related URGENT******
>
>
> try to switch on auditing... or try to query v$session (if the user is
> still
> connected)
> to get the machine name etc.
>
>
> > ----------
> > From: khalid qazi[SMTP:[Email Address Removed] > Sent: Friday, May 31, 2002 3:22 PM
> > To: LazyDBA.com Discussion
> > Subject: security related URGENT******
> >
> > Hi All,
> >
> > I am facing a security problem. Some regular user is trying to play with
> > the
> > production database.
> >
> > I have found out the culprit sql from v$sql. I wanted to know how can I
> > identify the machine name and address of terminal from which this sql
> was
> > fired.....................................
> >
> >
> > Regards,
> > Khalid Qazi
> > Tel : +91 (22) 652 8300 Ext 231
> > Fax : +91 (22) 397 8360
> >
> >
> >
> >
> > --------
> > Oracle documentation is here:
> > http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
> > To unsubscribe: send a blank email to oracledba-[Email Address Removed] > To subscribe: send a blank email to oracledba-[Email Address Removed] > Visit the list archive: http://www.LAZYDBA.com/odbareadmail.pl
> > Tell yer mates about http://www.farAwayJobs.com
> > By using this list you agree to these
> > terms:http://www.lazydba.com/legal.html
> >
>
>
> --------
> Oracle documentation is here:
> http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
> To unsubscribe: send a blank email to oracledba-[Email Address Removed] To subscribe: send a blank email to oracledba-[Email Address Removed] Visit the list archive: http://www.LAZYDBA.com/odbareadmail.pl
> Tell yer mates about http://www.farAwayJobs.com
> By using this list you agree to these
> terms:http://www.lazydba.com/legal.html
>
> --------
> Oracle documentation is here:
> http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
> To unsubscribe: send a blank email to oracledba-[Email Address Removed] To subscribe: send a blank email to oracledba-[Email Address Removed] Visit the list archive: http://www.LAZYDBA.com/odbareadmail.pl
> Tell yer mates about http://www.farAwayJobs.com
> By using this list you agree to these
> terms:http://www.lazydba.com/legal.html
>

--------
Oracle documentation is here:
http://tahiti.oracle.com/pls/tahiti/tahiti.homepage
To unsubscribe: send a blank email to oracledba-[Email Address Removed] subscribe: send a blank email to oracledba-[Email Address Removed] the list archive: http://www.LAZYDBA.com/odbareadmail.pl
Tell yer mates about http://www.farAwayJobs.com
By using this list you agree to these
terms:http://www.lazydba.com/legal.html

Oracle LazyDBA home page