Notice that for the audit trail entry, the "image" is "oracle@top420", while for the redo log entry the "OS_program_name" is "sqlplus@top420"... So, both seem to be correct, just for the different halves of the "two-task" connection... on 3/11/05 1:14 PM, Rajesh.Rao@xxxxxxxxxxxx at Rajesh.Rao@xxxxxxxxxxxx wrote: > Hello All, > > I connected as sysdba to my 9.2.0.5.0 database, and executed a few > statements. Here's what's in the audit trail log > (audit_sys_operations=TRUE). > > Oracle process number: 931 > Unix process pid: 28421, image: oracle@top420 (TNS V1-V3) > > Thu Mar 6 07:35:01 2005 > ACTION : 'CONNECT' > DATABASE USER: '/' > PRIVILEGE : SYSDBA > CLIENT USER: oracle > CLIENT TERMINAL: pts/2 > STATUS: 0 > > Thu Mar 6 07:40:48 2005 > ACTION : 'update scott.emp set JOIN_DATE = '07-JAN-05' where EMP_ID = > 4256' > DATABASE USER: '/' > PRIVILEGE : SYSDBA > CLIENT USER: oracle > CLIENT TERMINAL: pts/2 > STATUS: 0 > > Now, notice that the process number as per the trace file is 28421. Then, I > analyzed the archive log files using LogMiner, and under session info, for > the same statement, I see "login_username=SYS client_info= > OS_username=oracle Machine_name=top420 OS_terminal =pts/2 > OS_process_id=28411 OS_program name=sqlplus@top420 (TNS V1-V3)" > > So, as per LogMiner and the redo logs, the process number is 28411, whereas > as per the audit trace files, it is 28421. Who's reporting it wrong? > > Regards > Raj > > > -- > //www.freelists.org/webpage/oracle-l > -- //www.freelists.org/webpage/oracle-l