Sniffer Decode for Informix

Hello All, We are currently running 7.31.UC3XE on an AIX 4.3.3 server. One of our goals is to be able to identify all connections/sql statements and log them to a file for security monitoring. I know that I can capture a snapshot of this information from the sysmaster tables however this only tells me what is running at the time the statement(s) run. If we could capture the packet information as it comes across the wire we would be able to log that and {hopefully} not be too intrusive on the users. What we are really hopeing to find is the smart users that have figured out they can connect to our database with dbaccess or excel via ODBC and put a stop to them. 99.9% of our connections come from a propriatary application and this application contains the majority of our security. It is my understanding that I-Spy was tried here without much success. I have downloaded the INFSPY from IIUG but it looks like it would be a pretty heavy hit on performance for my 200+ user base. There is a push to get 9.4 here before end of Q1 next year but not sure what that will buy us at this point. We are running sql power tools but it tends to eat up 100+MB of memory on the server and has caused performance hits during crunch times. Thank you all very much for any information you might have. Bobby Medus

Bobby Medus wrote: > We are currently running 7.31.UC3XE on an AIX 4.3.3 server. One of > our goals is to be able to identify all connections/sql statements and > log them to a file for security monitoring. I know that I can capture > a snapshot of this information from the sysmaster tables however this > only tells me what is running at the time the statement(s) run. If we > could capture the packet information as it comes across the wire we > would be able to log that and {hopefully} not be too intrusive on the > users. Look into sqlidebug and sqliprint. -- Ciao, The Obnoxious One "Ogni uomo mi guarda come se fossi una testa di cazzo"