Sniffer Packet Decode?
Posted in 2003
Hello All, My company is running Informix 7.31 on AIX 4.3.3. We are currently looking at different ways to increase our security and performance to try and comply with the upcoming new Sarbanes-Oxley security laws. Our network geeks are using Sniffer Pro to look at network traffic. They were telling me that they have never been able to find a decode for Informix network packets. I know that I can run SQL statement snapshots against the sysmaster tables but this does not guarantee that I am capturing all users and all SQL statements. We run a proprietary 4gl application and the application does most of the security and authentication. The application is mostly intranet web based but we have a few "smart" users that have found that if they point to the ODBC driver they are able to connect directly to the database with Excel, Access and other non-approved things. 99.9% of our transactions are onsoctcp connections. Our goal is to be able to A) Be able to identify/log what users are connecting B) Be able to identify/log what SQL statements are being run C) Hopefully be able to tell what they are using to connect with. and D) do all of this with a minimal impact on performance My understanding is that my current employer had tried to run I-Spy at one time but their was too much overhead. We currently run SQL Power Tools on the server but it is a memory hog for us that eats up about 110+MB of memory and doesn't seem like a viable option for what we are wanting. If anyone has any information on the decode, or if you have any input on ways you have successfully captured this information I would love to hear it. Thank you all very much Bobby