I talked a few days ago about a free script that Ivan had posted to my Oracle security forum. On Monday David has posted another free Perl script in a thread titled "Re: Detecting brute forcing listener password" that can be used to monitor the listener log to check for TNS-01169 errors. The script has to be restarted if the log is rotated. You can define the interval between checks and also the number of errors as a threshold to trigger if an email is sent. This is a good simple script and very useful to check for attacks against the listener.
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "A useful perl script to check for listener password brute force attempts"] [Next entry: "Integration Promises Still Haunting Oracle"]
December 2005
- Pete Finnigan is back after a week away from blogging! - 12/03/2005 by 12/03/2005
- A sample package to manipulate LDAP - 12/04/2005 by 12/04/2005
- Oracle security checklist - 12/05/2005 by 12/05/2005
- Bugs - 12/06/2005 by 12/06/2005
- I am presenting at the DBMS SIG in Melton Mowbray about Oracle security - 12/07/2005 by 12/07/2005
- DBMS SIG conference today - A security focus - 12/08/2005 by 12/08/2005
- Good overview of SOA security - 12/09/2005 by 12/09/2005
- Arup's new book and some networking - 12/10/2005 by 12/10/2005
- A useful perl script to check for listener password brute force attempts - 12/11/2005 by 12/11/2005
- Integration Promises Still Haunting Oracle - 12/14/2005 by 12/14/2005
- The possible complexity level of Oracle database passwords is in question - 12/15/2005 by 12/15/2005
- Another way to monitor the listener log for brute force attacks - 12/16/2005 by 12/16/2005
- A new book "Cryptography in the Database: The Last Line of Defense" - 12/17/2005 by 12/17/2005
- Some more thoughts on the weakness of Oracle database passwords - 12/20/2005 by 12/20/2005
- Mary Ann Davidson announces that Fortify software will be used to find security holes in Oracle software - 12/21/2005 by 12/21/2005
- standalone discoverer clients now sso compliant for E-Business Suite users - 12/22/2005 by 12/22/2005
- A very happy christmas to everyone - 12/24/2005 by 12/24/2005
- State of the nation: referral spam, comments, content management, dedicated hosting and more - 12/29/2005 by 12/29/2005
- Spammers again... - 12/30/2005 by 12/30/2005
- More detailed analysis of the new Oracle worm - 12/31/2005 by 12/31/2005
Archives
Syndication
Powered by gm-rss 2.0.0
