vFeed


Tools no image

Published on March 25th, 2014 | by NJ Ouchn

0

[New Tool] TNSConnection Profiler v1.0 in the wild

When a client, be it a user or a web application, connects to an Oracle database instance it first connects to the TNS Listener. The listener hands the client off to the database instance and logs the connection.

The information logged by the listener about the connection contains, amongst other things, information such as the time of the connection, the IP address of the client and the source TCP port as well as the connection string used.

This connection string contains information about the username and the program used to connect. All of these pieces of information together create a “connection profile”.By parsing the listener log file one can create a list of connection profiles. This enables the database administrators and forensic examiners to establish whether unexpected connection profiles exist.

Tool submitted by David Litchfield (yep, himself 🙂 .. Thanks a lot !!

Tags: , ,


About the Author

"Passion is needed for any great work, and for the revolution, passion and audacity are required in big doses"



Back to Top ↑