Richard, The IDS has a deamon running in background (by the user netrangr) and every 5 minutes a IDS trigger is called and tries to connect to Oracle. He generates an log error and the sqlnet.log is generated too...
Thanks Fl�vio -----Mensagem original----- De: Richard Ji [mailto:[EMAIL PROTECTED]] Enviada em: quarta-feira, 15 de janeiro de 2003 13:54 Para: Multiple recipients of list ORACLE-L Assunto: RE: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syst How does the IDS gets run? Do you also login as netrangr and run it or is it started during system startup through rc.d scripts? -----Original Message----- Sent: Wednesday, January 15, 2003 6:44 AM To: Multiple recipients of list ORACLE-L Syst I installed IDS with a user called netrangr (the IDS manual shows it)! All Oracle variables are set in the profile of this user! If I connected in the Solaris with this user and call the sqlplus, I connect to the database allright!!! Thanks Fl�vio Reis -----Mensagem original----- De: Richard Ji [mailto:[EMAIL PROTECTED]] Enviada em: ter�a-feira, 14 de janeiro de 2003 17:29 Para: Multiple recipients of list ORACLE-L Assunto: RE: Problem with Oracle 8.0.6 and Cisco Intrusion Detection Syste What's the user account you have your IDS install under? I would check your Oracle environment variables first for that account. -----Original Message----- Sent: Tuesday, January 14, 2003 2:19 PM To: Multiple recipients of list ORACLE-L (I Hi! I'm encountering this error when the Cisco Intrusion Detection System (IDS)tries to connect to Oracle database (8.0.6): "********************************************************************* ** Fatal OSN connect error 12545, connecting to: (DESCRIPTION=(ADDRESS=(PROTOCOL=beq)(PROGRAM=oracle)(ARGV0=oracle) (ARGS='(DESCR IPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))')(DETACH=NO)) (CONNECT_DATA=(CID=(PRO GRAM=)(HOST=BR-DSPS01)(USER=netrangr)))) VERSION INFORMATION: TNS for Solaris: Version 2.3.2.1.0 - Production Oracle Bequeath NT Protocol Adapter for Solaris: Version 2.3.2.1.0 - Pro duction Time: 16-DEC-02 10:58:13 Tracing not turned on. Tns error struct: nr err code: 12206 TNS-12206: Message 12206 not found; No message file for product=NETWORK, fac ility=TNS ns main err code: 12545 TNS-12545: Message 12545 not found; No message file for product=NETWORK, fac ility=TNS ns secondary err code: 12560 nt main err code: 515 TNS-00515: Message 515 not found; No message file for product=NETWORK, facil ity=TNS nt secondary err code: 2 nt OS err code: 0" " The tnsnames and listener of Oracle are correctly configured to answer via BEQUEATH, TCP and IPC! They (ORACLE and IDS) are in the same machine, and via shell I can connect to the database (HP OpenView is installed in the machine too, and he connects to the database without problems)! The OS is Solaris 8! Someone knows how I can solve this? Thank you very much! -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?iso-8859-1?Q?Fl=E1vio_Reis?= INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Richard Ji INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?iso-8859-1?Q?Fl=E1vio_Reis?= INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Richard Ji INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?iso-8859-1?Q?Fl=E1vio_Reis?= INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
