rogue SYS connections

2003-12-10 Thread Vordos, Suzy
Solaris 2.8 Oracle 8.1.7.0. We have session auditing enabled, and see rogue connections as SYS from several remote databases. The os_user of the remote system is always oracle and there are several different remote hosts involved. I can't figure out how they are gaining access this way. Our

Re: rogue SYS connections

2003-12-10 Thread Ron Rogers
Suzy, Do you use RMAN to perform backups? Do you use a catalog with RMAN? Rman uses sys to perform the connections to the target database. Just a thought, Ron [EMAIL PROTECTED] 12/10/2003 3:09:33 PM Solaris 2.8 Oracle 8.1.7.0. We have session auditing enabled, and see rogue connections as

RE: rogue SYS connections

2003-12-10 Thread Vordos, Suzy
Thanks Ron. No, we use SQL-Backtrack instead of RMAN. However SQL-Backtrack does show a diff flavor of rogue connections of ###NOBODY. The remote database systems that are connecting to our database as SYS are not ones we support. What is common about these databases is they do have