Audit Files Have Different File Types (Doc ID 1321392.1)

Last updated on JULY 06, 2011

Applies to:

Oracle Server - Enterprise Edition - Version: 11.2.0.2 and later   [Release: 11.2 and later ]
Information in this document applies to any platform.

Goal

Some of the audit files written to the OS audit trail are in binary format. For example when doing the following on a 11.2.0.2 instance a non ascii audit file is being dumped in the audit trail:


alter system set audit_trail=OS scope=spfile;
alter systen set audit_sys_operations=true scope=spfile;

shutdown immediate
startup

exec DBMS_DST.END_PREPARE;




The audit file that will be created contains a "strange" character:



DBID:[9] '506265968'

Thu Feb 10 16:42:44 2011 +02:00
LENGTH : '186'
ACTION :[34] 'BEGIN DBMS_DST.END_PREPARE; END;
^@' <--------------------------------------------------------------------------------this is the bad character !!!!
DATABASE USER:[1] '/'
PRIVILEGE :[6] 'SYSDBA'
CLIENT USER:[6] 'oracle'
CLIENT TERMINAL:[5] 'pts/0'

The file is being reported as "data" by the file command:


[oracle@seclin4 adump]$ file d1v11202_ora_16449_1.aud
d1v11202_ora_16449_1.aud: data



 Is this the expected behaviour?

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms