Re: Testing encryption of ASO

Mike,

Tuesday, August 31, 2004, 3:44:54 PM, you wrote:



M> Hi all,

M> I am testing Advanced Security to encrypt network traffic between a client 
M> PC and the database server.  It seems to work fine, but I would like to 
M> confirm that the data is being encrypted.

M> I read on Metalink that you can test this by setting the listener or client 
M> trace level to 16.  If you are able to see the Text of your statements, 
M> then encryption is not working.  The problem is that I am not able to see 
M> the Text of the statements with encryption on or off.

M> Any ideas on how I can test if encryption is working or not?

Are you sure you set up your sqlnet.ora correctly?  On my w2k client I
put the following lines in my sqlnet.ora:

TRACE_LEVEL_CLIENT = 16
TRACE_DIRECTORY_CLIENT =c:\orahome1\network\admin
TRACE_FILE_CLIENT = client.trc

Then I logged on and did the following:

SQL> select * from dual;

Way down in the produced client.trc (starting at line 3690) I find:

nttwr: entry
nttwr: socket 344 had bytes written=70
nttwr: exit
nspsend: 70 bytes to transport
nspsend: packet dump
nspsend: 00 46 00 00 06 00 00 00  |.F......|
nspsend: 00 00 03 5E 28 02 80 61  |...^(..a|
nspsend: 00 01 01 13 01 01 0A 00  |........|
nspsend: 01 00 01 01 00 00 00 00  |........|
nspsend: 00 00 00 01 73 65 6C 65  |....sele|
nspsend: 63 74 20 2A 20 66 72 6F  |ct * fro|
nspsend: 6D 20 64 75 61 6C 0A 01  |m dual..|
nspsend: 01 00 00 00 00 00 00 01  |........|
nspsend: 01 00 03 11 00 04 00 00  |........|
nspsend: normal exit
nsdofls: exit (0)


Do you not see something similar?

-rje

----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: