0 积分	1 好友	10 主题

发消息

[RAC Clusterware] 不开审计如何捕获短连接的用户？

1^#

发表于 2013-4-7 16:57:31 | 查看: 5215| 回复: 8

11g R2 rac 2node, suse 11

检测到某台应用每秒连接数据库16次左右，有好几个用户应用在这台服务器上，
基本上是连接以后马上断开，
请问如果不开审计，有什么方法查到是哪个用户的session，以及session做了哪些活动？

分享0

收藏0 回复只看该作者道具举报

Maclean Liu(刘相兵

2^#

发表于 2013-4-7 17:01:34

查listener.log 可知一二 :)

回复只看该作者道具举报

ShineCQY

3^#

发表于 2013-4-7 17:02:26

本帖最后由 ShineCQY 于 2013-4-7 17:04 编辑

这个，方法太多了吧，使用logminer或者触发器。

回复只看该作者道具举报

Teddy.huang

4^#

发表于 2013-4-7 17:28:11

Maclean Liu(刘相兵发表于 2013-4-7 17:01
查listener.log 可知一二 :)

我看了listener.log，USER=后面没有用户名，直接是空，很奇怪。如下：

07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53597)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53598)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53599)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53600)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53601)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53602)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53603)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53604)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53605)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53606)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53607)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53608)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53609)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53610)) * establish * ora11g * 0
07-APR-2013 09:57:19 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=ora11g)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.221.3.131)(PORT=53611)) * establish * ora11g * 0