Determine IP address connect to IDS
Answered: amber (solid confidence) — Art Kagel gives a clear, on-point answer (onstat -g ses, sysmaster.syssessions, server auditing) but the asker never confirms it worked.
Advisory only.
Posted in 2013
Topics: Security, Permissions & Auditing
hi,
For audit security purpose, can informix determine ip address client/pc that
connect to informix database?
When use "onstat -u" we can only see username. maybe have another command to
check ip address that connect.
tq
onstat -g ses shows the hostname or IP address from which the userconnected - or part of it anyway, the field is small. The full hostname/ip
address is saved for the life of the session in the table
sysmaster.syssessions. The records go away when the session disconnects,
so you will have to poll periodically and copy the data to a permanent
table somewhere for auditing.
You could also turn on server auditing which will record that information
in the audit logs.
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
Blog: http://informix-myview.blogspot.com/
Disclaimer: Please keep in mind that my own opinions are my own opinions
and do not reflect on my employer, Advanced DataTools, the IIUG, nor any
other organization with which I am associated either explicitly,
implicitly, or by inference. Neither do those opinions reflect those of
other individuals affiliated with any entity with which I am affiliated nor
those of the entities themselves.
On Fri, Feb 22, 2013 at 4:39 AM, MOHD FADZIL JUSOH <fadzil@isianpadu.com>wrote:
> hi,
>
> For audit security purpose, can informix determine ip address client/pc
> that
> connect to informix database?
>
> When use "onstat -u" we can only see username. maybe have another command
> to
> check ip address that connect.
>
> tq
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--e89a8f23465991655904d64e09cb