Security....

[B14speedfreak]

Hi all,

Thanks in advance for reading and any posts.

We have recently upgraded our financials database to 10g with apps 11.5.10 we are using a solaris 8 box. One thing we noticed is that our apps user is trying to ping home, at one point it spawned over 700 processes all trying to ping somewhere in oracle.

I found this site:

http://ws.arin.net/cgi-bin/whois.pl

not sure how good the info is, but its point out that the IP addresses are from Oracle HQ.

Not sure if anyone else has encountered this, maybe they are trying to do the microsoft thing with licences???

Carn't really figure out what it is thats doing this, alls I know is that I will keep an eye on it unless anyone else has any ideas?

THanks again for reading and any posts,

B14... aka... marky mark...

 

[dbnetsi]

Hi
So if I read this right then the user that runs the application server is initiating ping to locate whether a device is available somewhere in the Oracle Net space.
I know in 10G that the database server has an option to allow it to connect and download automatically patches so that they can be applied. App server may be trying to check if the update server is available to do get patches.
Alternatively it may be that the server is slightly misconfigured and actually still has reference to Oracle ip addresses in a file and is using those to try and attach to some process

Technology Consultant, Australia
"So much of what we call management consists of making it difficult for
people to work" --- Peter Drucker

 

[B14speedfreak]

Yeah I guess it could be that, however would you expect it create over 700 seperate processes pinging various oracle IP address if it was just trying find out if any patches are available.

I am not sure about there being files with oracle ips in them. This is not something that we would put in (since we don't know them), must something to do with a patch. Anyhow seems to have quitened down a bit.

Thanks the replay though.

B14... aka... marky mark...