Auditing Network Activity

You can use the AUDIT statement to audit unexpected errors in network protocol or internal errors in the network layer. The types of errors uncovered by network auditing are not connection failures, but can have several other possible causes. One possible cause is an internal event set by a database engineer for testing purposes. Other causes include conflicting configuration settings for encryption, such as the network not finding the information required to create or process expected encryption.

To enable network auditing:  

1. Start SQL*Plus and log on with administrative privileges, such as SYSTEM, or as a security administrator. For example:

   SQLPLUS SYSTEM
   Enter password: password
   

   SQL*Plus starts, connects to the default database, and then displays a prompt.

   For detailed information about starting SQL*Plus, see Starting SQL*Plus and Connecting to the Database.

2. Enter the following statement:

   AUDIT NETWORK;
   

   To disable network auditing, enter the following:

   NOAUDIT NETWORK;
   

3. Exit SQL*Plus:

   EXIT