Call: +44 (0)1904 557620 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "David Litchfield has a new blog"] [Next entry: "Egor Starostin has a blog"]

OraSRP open source SQL Trace profile tool



I saw a post today titled "Re: Event 10046 trace report makers" in my Oracle security forum, on the Oracle internals board. This was an interesting thread posted originally by Marcel-Jan about an open source Oracle profile tool that can be used to profile 10046 trace files. Someone then posted that the author Egor Starostin had closed the page and the source and tool were no longer available. His page says "Due to personal obligations, OraSRP project is closed.". Marcel-Jan has today posted a further note that he has found a free Linux version of oraSRP including source code at a page titled "SQL Trace Access and Analysis". The tool is written in Python and a binary version is also available.

The zip of the python source code is Egor's code but the Windows version is not available just the Linux one. I am not a python programmer but i guess it would not be too difficult to get it running on Windows as well as Linux, some python programmers will no doubt email me and tell me I am wrong!

This looks like a fine body of code and a useful tool, I will have a play when i get some free time...