Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security tools >> SQLGotcha 4.0 beta is available
        
(Message started by: Pete Finnigan on Mar 22^nd, 2007, 10:51am)

Title: SQLGotcha 4.0 beta is available
Post by Pete Finnigan on Mar 22^nd, 2007, 10:51am

This morning I've released SQLGotcha 4.0 beta on Sourceforge. Have a look on http://sourceforge.net/projects/sqlgotcha/.

SQLGotcha is a tool that searches and traces sessions, based on several criteria. Now, before SQLGotcha 4.0 beta, you could only choose one condition, for example username or program. Now you can choose several conditions, based on the columns of v$session. Also you now can choose to trace with any event. All the functionality of previous versions, by the way, is also available, since I've made SQLGotcha 4.0 beta backwards compatible.

Here is how it works. Suppose you want to trace a session that corresponds to username=hsimpson, os user=hsimpson and you know he logs in with TOAD. In SQLGotcha 4.0 beta you would trace his session with event 10046 level 12 like this:

exec sql_gotcha_pack.search_and_trace_session ('USERNAME=TOAD, OSUSER=hsimpson, PROGRAM=TOAD.exe', 10046, 12)
and end the trace with:
exec sql_gotcha_pack.end_trace_session('USERNAME=TOAD, OSUSER=hsimpson, PROGRAM=TOAD.exe')

I've already used SQLGotcha 4.0 beta a number of times of course, and I enjoy this new functionality very much. I hope you do too. Let me know whether you've liked it (or whether you've found any bugs).