Security tool for Oracle called Oscanner - question

[tim gjerlufsen]

Hi All

I have a question regarding the Security Tool called Oscanner, a very power
full Oracle database scanning tool.

When using it for my Windows servers, it works fine, I can enumerate the
Oracle Sid's automatically and does the search for database link and report
if any were found.

But If I try the same test against a Tru64 Unix that have some Oracle
databases, the Oracle Sids, can't be enumerated automatic (I have to place
them into the services file) and the discovery of Database links also fails.

Does any of you know a workaround to make it work on Unix / Tru64?

Regards Tim


Please reply directly to tigj@dffe.dk

[Hans Forbrich]

On Wed, 06 Apr 2005 23:40:44 +0200, tim gjerlufsen interested us by writing:

1) posting in all cdo subgroups doesn't help much as the same people who
respond in one group eventually respond in all groups.

2) have you asked the developers of the tool (we are generally familiar
with Oracle-created tools, but this one is obscure to me.) I've found a
number of 'useful tools' that were developed and only tested on Windows
and never did work right on *nix because of developer's assumptions or use
of funny back doors.

3) traditionally SQLNet listener has operated differently in Windows than
in *nix (eg: to hand off to the user process windows uses port sharing,
whereas *nix uses either hand-off or redirect techniques). Could have an
impact.

SOme thoughts that could have an impact

- database versions
- listener ports
- database self-registration with listeners

But, since I know nothing about Oscanner, it's all speculation. And no
workaround suggestions from me either - sorry.
/Hans
--
Hans Forbrich
Canada-wide Oracle training and consulting
mailto: Fuzzy.GreyBeard_at_gmail.com
*** I no longer assist with top-posted newsgroup queries ***