Sniffer captures on Oracle Traffic

When diagnosing Sniffer captures, I see the following messages religiously.
1) SQL:Return OPI parameter
2) Expert Retransmission
TNS: duplicate of frame #
Occasionaly our end users are moving slow within the database or lose their connection to the database entirely. Do the aforementioned messages have any correlation to their poor performance?
null

Hello,
What is the OTD version?
Your issue could be related to following bug:
Bug 19302269 : 1.1.1.7.0 B01-TCP-PROXY HEALTH CHECK ISSUES-LOTS OF CLOSE_WAIT CONNECTIONS
If you could supply strace output for review than we could confirm the same.
strace -tt -T -f -F -i -v -e read=all -e write=all -o /tmp/OTD_strace.out <pidofotdnodes>
Regards,
Suraj Tamang
Oracle Exalogic Support

Similar Messages

Traffic-export capturing only inbound traffic

Hi
We have a Cisco 2811 running ITP IOS. On that router we run the SMPP service. A client on the network connects to this service, and we need to capture the traffic for debug.
I've tried traffic-export, but I cannot see any outbound traffic.
I'm guessing that this is due to the fact that the outbound SMPP traffic is not transit traffic as it is generated by the router itself.
Is there any way to capture the outbound traffic?
Thanks
Colin

Hi Colin,
Please see below
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_cfg/configuration/12-4/sec-ip-traff-export.html
Step 8
outgoing {access-list{standard | extended | named} | sample one-in-every packet-number}
Example: Router(config-rite)# outgoing sample one-in-every 50
(Optional) Configures filtering for outgoing export traffic.
Note
If you issue this command, you must also issue the bidirectional command, which enables outgoing traffic to be exported. However, only routed traffic (such as passthrough traffic) is exported; that is, traffic that originates from the network device is not exported.
An option might be to plug in to a cisco switch and SPAN the port to an interface with a sniffer on it like wireshark?
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic4

SQL Server 2012 Change Data Capture for Oracle by Attunity support for Oracle 12

I would like to know if there are any plans for SQL Server 2012 Change Data Capture for Oracle by Attunity to support versions of Oracle 12 and if by when.

I have asked from the author of
http://blogs.msdn.com/b/mattm/archive/2012/03/26/cdc-for-oracle-in-sql-server-2012.aspx about this.
I will either ask him to answer here or I would be a messenger.
Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
This posting is provided "AS IS" with no warranties, and confers no rights.
My Blog |
Team Blog | @Twitter
Author: SQL Server 2012 AlwaysOn -
Paperback, Kindle

Design Capture of Oracle Forms

I can successfully capture an Oracle Form built by Forms Builder into a Module in Designer 9i. When I generate the Form based on the reversed Module Data Diagram, the generated Form does not have the same user-interface at run-time. For example, the tool-bar for records navigation does not appear.
Can any one tell me whether it is possible to capture application logic as well as exact layout from a Form?
Is it possble to capture Oracle menus?
Any help is appreciated.

"...the tool-bar for records navigation does not appear"-I think that you have to create a template form and put toolbar there.
I hope this will be a little help for you.

SQL*NET (Oracle) traffic being punted to Catalyst 4500 CPU

We just recently migrated to a new network which consists of Cisco 5585-X ASAs and Cisco 4500-X routers. The nature of our network involves Oracle traffic, utilizing Oracle TNS protocol to communicate, to send traffic to it's gateway within an ASA context firewall, which then is forwarded to the 4500 to be routed back to a different context in the ASA and to destination application servers.
The problem we immediately began to see after we moved onto this new network is that when the Oracle TNS traffic hits the 4500 to be routed it gets punted to the CPU for switching instead of being hardware switched. Due to this, our average CPU utilization on our 4500 is around 60% and causes really slow throughput on our Oracle traffic (approx 100-200Mbps). I've included a screenshot of a pcap from the 4500 indicating that the router is not agreeing with the TNS traffic. Although TCP retransmissions, Dup ACKs, and incorrect frame checks are perceived by the 4500, this is not actually what's happening as the traffic is flowing through fine on the ASA and we're not seeing any drops of the packets or Oracle application issues (besides slow throughput due to CPU processing).
I do have a TAC case open on this and Cisco is currently looking at the issue, but it appears there is no quick or easy fix. I was wondering if anyone else out there might have some sort of idea on what the solution might be or have seen this before. Would appreciate any feedback.
Thanks,
LK

Just wanted to let everyone know the fix. Apparently nearly all packets were getting punted to the CPU on the 4500 due to a feature called "ip redirect" where a packet that comes into the 4500 on one interfaces gets routed out the same interface and causes a CPU punt due to the feature. Disabling this under all VLAN interfaces on the 4500 fixed it and stopped the punts.

Capture all VPN traffic?

I downloaded Microsoft Network Monitor and I'm trying to look at all the traffic going on on the remote network. I enabled NDISWANBH (WAN Miniport) only to capture the PPP traffic. I have set up PPTP VPN and can connect to (and browse) the remote network
just fine.
But when I tried to capture all the traffic on the VPN network, it only showed my computer's IP address (the local one when connected to the network 192.168.1.200) and the remote router's IP address (192.168.1.1).
I'm looking to capture what the other computers and devices (that are on the remote network) are doing. How do I do that?

When you start network monitor, you need to select NDISWAN from select networks. You should see this option on the start page when you launch Network Monitor.
BTW, Message Analyzer (http://blogs.technet.com/MessageAnalyzer), the eventual replacement for Network Monitor, can also capture tunnel traffic, but intstead it uses a firewall driver to capture the
data. Perhaps this is another option for you.
Thanks,
Paul

ERROR OGG-00868 Oracle GoldenGate Capture for Oracle, ext1.prm: + ORA-12514

Hello Guys,
Environment is as below:
Primary site (source): This is production DB and up and running.
RAC 2 nodes
Oracle RAC 11.2.0.1.0
ASM
Enterprise Linux Server release 5.5 (Carthage)
target Site (destination): Software installed and instance has been created.
Standalone single server - Non RAC
Oracle 11.2.0.1.0
ASM
Enterprise Linux Server release 5.5 (Carthage)
Oracle GoldenGate 11g Release 1 (11.1.1)
I have installed and setup Oracle GoldenGate 11g Release 1 (11.1.1) But I am getting below error while starting extract:
2011-05-01 21:27:41 INFO OGG-00987 Oracle GoldenGate Command Interpreter for Oracle: GGSCI command (oracle): edit params ext1.
2011-05-01 21:29:11 INFO OGG-00987 Oracle GoldenGate Command Interpreter for Oracle: GGSCI command (oracle): start extract ext1.
2011-05-01 21:29:11 INFO OGG-00963 Oracle GoldenGate Manager for Oracle, mgr.prm: Command received from GGSCI on host xxx.xx.x.4 (START EXTRACT EXT1 ).
2011-05-01 21:29:11 INFO OGG-00975 Oracle GoldenGate Manager for Oracle, mgr.prm: EXTRACT EXT1 starting.
2011-05-01 21:29:11 INFO OGG-00992 Oracle GoldenGate Capture for Oracle, ext1.prm: EXTRACT EXT1 starting.
2011-05-01 21:29:11 INFO OGG-01635 Oracle GoldenGate Capture for Oracle, ext1.prm: BOUNDED RECOVERY: reset to initial or altered checkpoint.
2011-05-01 21:29:12 ERROR OGG-00868 Oracle GoldenGate Capture for Oracle, ext1.prm: Attaching to ASM server asm: (12514) ORA-12514: TNS:listener does not currently know of service requested in connect descriptor.
2011-05-01 21:29:12 ERROR OGG-01668 Oracle GoldenGate Capture for Oracle, ext1.prm: PROCESS ABENDING.can anyone tell me how to edit listener.ora for ASM instance so that it may capture data from instance.
Below is the listener.ora :
$ cat listener.ora
LISTENER_SCAN3=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN3)))) # line added by Agent
LISTENER_SCAN1=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN1)))) # line added by Agent
LISTENER_SCAN2=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN2)))) # line added by Agent
LISTENER=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER)))) # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER=ON # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN2=ON # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN1=ON # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN3=ON # line added by Agent
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = +ASM1)
(ORACLE_HOME = /u01/app/11.2.0/grid)
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = +ASM2)
(ORACLE_HOME = /u01/app/11.2.0/grid)
$$ cat tnsnames.ora
# tnsnames.ora Network Configuration File: /u01/app/oracle/product/11.2.0/db_1/network/admin/tnsnames.ora
# Generated by Oracle configuration tools.
ASM =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = xxxdata-scan)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = +ASM2)
$your response will be highly appreciated.
Cheers !!!
LazyDBA11g
Edited by: LazyDBA11g on May 5, 2011 11:16 PM
Edited by: LazyDBA11g on May 22, 2011 5:24 AM
Edited by: LazyDBA11g on May 22, 2011 5:29 AM
Edited by: LazyDBA11g on May 30, 2011 10:46 PM

Hi,
I installed GG with same configuration and i didn't configure ASM statically in listener.ora at all:
LISTENER=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER)))) # line added by Agent
LISTENER_SCAN1=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN1)))) # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN1=ON # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER=ON # line added by Agent
When i check listener status, i can see that ASM Instance is correctly registered:
$ lsnrctl status
LSNRCTL for Linux: Version 11.2.0.2.0 - Production on 26-MAY-2011 15:41:48
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for Linux: Version 11.2.0.2.0 - Production
Start Date 16-MAY-2011 13:17:17
Uptime 10 days 2 hr. 24 min. 31 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /opt/oracle/grid/11.2.0.2/network/admin/listener.ora
Listener Log File /opt/oracle/base/diag/tnslsnr/pollux/listener/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=xx.xxx.xxx.92)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=xx.xxx.xxx.94)(PORT=1521)))
Services Summary...
Service "+ASM" has 1 instance(s).
Instance "+ASM1", status READY, has 1 handler(s) for this service...
Service "R112" has 1 instance(s).
Instance "R1121", status READY, has 1 handler(s) for this service...
Service "R112XDB" has 1 instance(s).
Instance "R1121", status READY, has 1 handler(s) for this service...
The command completed successfully
You need to make sure, that ASM registers dynamically with your listener. In my case i have set local_listener in ASM instance as follows:
SQL> show parameter local_listener
NAME TYPE VALUE
local_listener string (DESCRIPTION=(ADDRESS_LIST=(AD
DRESS=(PROTOCOL=TCP)(HOST=xx.xxx.xxx.94)(PORT=1521))))
This is no GG specific question. You need this for other tools like Gridcontrol as well.
Hope this helps,
Robert

Oracle Traffic Directory

Hi ,
we have configured oracle traffic directory with multi repository which works for 6 applications distinctly. Each application has each instance..i.e 6 applications has 6 instances. Out of 6, 1 instance , wee need to reboot on daily basis, otherwise, it's not redirecting the connections. when OTD is not redirecting the URL, at that time, i have cross -checked port status of that port. It's in the status of 'CLOSE_WAIT'. Nothing has been logged in access.log, server.log. what could be the cause of instance hang ?

Hello,
What is the OTD version?
Your issue could be related to following bug:
Bug 19302269 : 1.1.1.7.0 B01-TCP-PROXY HEALTH CHECK ISSUES-LOTS OF CLOSE_WAIT CONNECTIONS
If you could supply strace output for review than we could confirm the same.
strace -tt -T -f -F -i -v -e read=all -e write=all -o /tmp/OTD_strace.out <pidofotdnodes>
Regards,
Suraj Tamang
Oracle Exalogic Support

Packet Capture for VPN traffic

Hi Team,
Please help me to set ACL and capture for Remote Access VPN traffic.
Requirement is to see how much traffic is flowing from that Source IP.
Source : Remote Access VPN IP(Tunneled) 10.10.10.10
Destination : any
This is what I did which is not working
access-list VPN extended permit tcp host 10.10.10.10 any
capture CAP_VPN type raw-data access-list VPN interface OUTSIDE

Hello,
If you set up the capture with that access list, you are filtering just TCP traffic, therefore you won't be able to see UDP or ICMP traffic too, I would recommend you using the same ACL, though using IP:
access-list VPN extended permit ip host 10.10.10.10 any
Capture CAP_VPN access-list VPN interface outside
Then with:
show capture CAP_VPN
You will be able to see the packet capture on the ASA, though you can export the capture to a packet sniffer as follow:
https://<ip address of asa>/capture/<capname>/pcap capname-->CAP
For further details of captures you can find it on this link
Let me know if you could get the information you were trying to reach.
Please don´t forget to rate and mark as correct the helpful Post!
David Castro,
Regards,

Capture event oracle.apps.wf.notification.receive.message

Hi,
I am trying to capture the event oracle.apps.wf.notification.receive.message.
Whenever system receives an email response of a notification, I want to insert some values to a table.
I have created subscription on this event and calling a package procedure which inserts the data into table.
Now, If I test the event from the business events screen itself, subscription is working (i.e. inserting the data into table).
However, when I am replying a notification, I can see that event is fired (from system administratoin->workflow->agent activity), but values are not being inserted in the table.
My package procedure has pragma autonomous transaction and commit.
Also, I have tried various combinations of event being Local or external.
Any thoughts why the subscription is not coming in action?
Thanks,
Abdul Wahid

One Update.
I tried to fire some different event and registered this function with that.
Its working with this event.
Does that mean that oracle.apps.wf.notification.receive.message event is not being fired?

Is it possible to sniff connection between Oracle AS and Oracle DB?

i searched for documentation about security on communication between AS and DB. mod_plsql is used for connection to DB, it has some authentication modes but i think this is not security on protocol, just a user level security.
as in topic, is it possible to sniff and get network packages? if so, how to prevent?
or do you direct me to some oracle documentation about network security?
regards,
Ayhan

Thanks for the reply Daniel,
My colleague has looked at the underlying data structures and they are not intuitive, in addition there's nothing to say that Oracle would not change the schema in a future release so I'd have to rule this out for that reason.
I am aware of Oracle APIs for replicating data between;-
OID -> OID
or
OID -> To any other LDAP compliant directory i.e. Sun's IPlanet (albeit somewhat limited from the previous option).
What I'm looking for is an API that will replicate data between OID and a DATABASE.
My rationale for requiring this interface is because our customer has data in OID that we need as reference data in a database to improve the efficacy of data analysis, LDAP is very poor at this. I am resisting writing the code to do this replication until I can prove no API exists.
Kind regards,
Chris

Change Data Capture for Oracle 9i

If your environment must keep large amounts of data current, the Oracle CDC feature is a simple solution to limiting the number of rows that Data Integrator reads on a regular basis. A source that reads only the most recent operations (INSERTS, UPDATES, DELETES), allows you to design smaller, faster delta loads.With Oracle 9i, Data Integrator manages the CDC environment by accessing Oracle's CDC packages. Oracle publishes changed data from the original table to its CDC table. After a CDC table receives published data, you can create subscriptions to access the data. Data Integrator Designer allows you to import CDC tables and create subscriptions for them.For more information see "Techniques for Capturing Changed Data" of the Data Integrator Designer Guide.

Werner did a nice step-by-step instruction on how to set up CDC in Oracle and use this inside Data Integrator. <a href="http://www.consulting-accounting.com/time/servlet/ShowPage?COMPANYID=43&ELEMENTID=1641" target="_blank">http://www.consulting-accounting.com/time/servlet/ShowPage?COMPANYID=43&ELEMENTID=1641</a>

Change Capture For Oracle EBS Sources

Hello,
I am trying to understand how the change capture process happens in DAC.
For Siebel sources, I understood that it happens through 'image' tables. And there are some docs/info available on this.
I am just wondering how this happens in case of Oracle EBS and other sources. I think there is no image table concept with these sources.
Can anyone point me to some info on this..?
Many Thanks..!

Yes, for EBS, PeopleSoft and other non-Siebel sources, the change capture process is usually based on a form of "LAST UPDATE DATE" on the source system tables. This is is usually compared against the "LAST REFRESH DATE" in the DAC for the source and target tables. This can be seen if you look at the Session overrides for the FULL versus INCREMETAL workflows/sessions. Of course, this process may differ based on the nature of the source system. I believe certain sources that do not have a useable "LAST UPDATE DATE" may require a full extract each time. The best approach would be to go through the vanilla ETL code for FULL versus INCREMENTAL sessions.
if this was helpful, please mark the answer as correct.

SQL Server table capture using Oracle SQL Developer

Hello,
I need to know how to set up the Oracle SQL Developer to captuer SQL Server table with correct field precision. For some reason, all NVARCHAR field precision sizes are the double of the original precision size after capturing the table.
Example:
SQL Server table 'A' with the following field:
name NVARCHAR( 50)
after table capture becomes:
name NVARCHAR2(100)
which is double of the original precision.
Any feed back or input is greatly appreciated.
Thank you.
Message was edited by:
qa2537

i'm sorry
--tsql correction
merge into md_columns m
using(
select md_col.precision as prec, md_col.column_name,md_col.rowid as row_id
FROM md_schemas md_s
join md_tables md_tab on md_tab.schema_id_fk = md_s.id
join md_catalogs md_cat on md_cat.id = md_s.catalog_id_fk
inner join md_connections con on md_cat.connection_id_fk=con.id
join md_columns md_col on md_col.table_id_fk = md_tab.id
where --md_s.created_on = (select max(created_on) from md_catalogs)
con.name like '%(corr%)'
and md_col.column_type in ('nchar','nvarchar')
) merge_clause on (m.rowid = merge_clause.row_id)
when matched then update set m.precision = merge_clause.prec/2
that works, as long as you don't forget to commit like i did....
hope it helps

No more Change Data Capture in Oracle 12c

Can anyone explain why this feature is being moved out of the database product and into the Golden Gate option? Does this mean that anybody using CDC in 11g must now license Golden Gate when moving to 12c, if so, what are some of the additional benefits of Golden Gate?
Thanks

63944f3a-c27e-4f4e-89c6-e33d0c86222e wrote:
Hi John,
Thanks for your response. I found this Deprecated and Desupported Features for Oracle Database 12c and under 8.2.2 it says CDC is not included in DB 12c. From the way it reads it seems to be saying CDC is only in Golden Gate now. I assume Streams is still included in 12c?!?
I've just set up CDC in a 12.1.0.1 instance, using a hotlog_source, and it works no problem. Exactly the same as in 11.x. Tested it right through to purging a subscription window.

Sniffer captures on Oracle Traffic

Similar Messages

Maybe you are looking for