AIP SSM-10 - how to check traffic being passed for inspection?

Hello

I've implemented an AIP - SSM on our ASA5510 for the first time, as a result of this excellent guide, http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807335ca.shtml.

The difference between the environment used in the doco and ours are the specifications of our ASA and module, the following IOS version 8.0 (4), version ASDM is 6.1 (3), the version of the application of SSM is 5,0000 E2.

I have followed all the steps to enable connectivity to the module of the ASDM, created the access list to allow all ip traffic to be transmitted to the inspection module, map of the class and the political map indicating promiscous mode, relief. The service policy is applied throughout the world.

The problem I'm having is that when I try to check as indicated on the guide to the alert of events see the command on the CLI module I don't get any output, so I don't know if the traffic is passed to the module. Can someone plese help me clarify this?

Kind regards

Esteban

Run 'show conf' on your AIP SSM CLI. Check interface GigabitEthernet0/1 basket of the MSS background assigned to sensor virtual vs0.

If it does not, then run "setup" and towards the end of the installation wizard, there will be an option to change the interface and the virtual sensor configuration. Use this option to change the configuration for sensor virtual vs0 and in the interface.

You can also run "show stat vs0 virtual sensor" to see the number of packets being crawled by vs0.

Tags: Cisco Security

Similar Questions

  • How to check the image source for the image which is losted?

    Hello world

    How to check the image source for the image which is losted?

    If the image source already exists, I can read the PlaceItem.file.fsName.

    But if remove the image of the source, read the PlaceItem.file.fsName will report the error: there is no file associated with this element

    Thank you

    If (app.documents.length > 0) {}

    var sourceDoc = app.activeDocument;

    sourceName = sourceDoc.name var;

    artItem =]

    for (i = 0; i < sourceDoc.pageItems.length; i ++) {}

    artItem [i] = sourceDoc.pageItems [i];

    If (.) TypeName artItem [i] == 'PlacedItem') {}

    If (.imageColorSpace [i] artItem == undefined) {}

    Alert ("the file is the link, but I don't know whether or not the source image is losted");

    }

    }

    }

    }

    Use try/catch to catch the error

    if (app.documents.length > 0) {
        var sourceDoc = app.activeDocument;
        var sourceName = sourceDoc.name;
        artItem = []
        for (i = 0; i < sourceDoc.pageItems.length; i++) {
            artItem[i] = sourceDoc.pageItems[i];
            if (artItem[i].typename == 'PlacedItem') {
                if (artItem[i].imageColorSpace == undefined) {
                    try {
                        var fname = artItem[i].file.name;
                        alert("file name: " + fname);
                    }
                    catch (e) {
                        alert("The file is linking ,but source image is lost");
                    }
                }
            }
        }
    }
    
  • How to check if the database for DRDA gateway is installed and configured.

    Hi all

    How can we check if the database for DRDA gateway is installed and configured.

    Our operating system is AIX 5 L 64 bit OS.
    RDBMS: 11.2.0.3

    Kind regards

    Duplicated
    How to check if the database for DRDA gateway is installed and configured.

    + - locked thread-+.

    Nicolas.

  • How to check the matrix Certification for RMAN

    All the

    I am interested in finding the certification of rman.

    My client has catalog db on 9i targets are 10 g/11 so we are trying to identify an appropriate RMAN s/w that will support all the databases we have. So, the question is.

    How to check the matrix certification for RMAN?

    PL. tell me the notes, if any.

    Thank you
    Sashi.

    In addition to the Metalink note, you can check the documentation too @ RMAN compatibility matrix

  • How to check the ESX memory for errors?

    Hi all

    I faced with the strange behavior of ESX:

    Some linux VMs (RHEL) were stopped. No error messages in the vCenter nor LabManager, I even thought that someone just connected and Runic stop.

    Below you will find information of ESX server logs:

    (1) the vmkernel newspaper:

    #grep - color = always-i ' 1922 [^ 0-9] "... /VMkernel *"

    .. (/ VMkernel.8:Dec 8 22:22:40 WKK1EC02 vmkernel: 290:11:51:47.230 cpu14:23084) UserDump: 1441: Dumping cartel 23079 (of the world 23084) to file the vmfs/volumes/4a4ce277-4a35505c-8828-0024817b058c/labmanager/1922/vmware-vmx-zdump.000...

    (2) the journal of the VM:

    # grep ' 08 Dec' /vmfs/volumes/4a4ce277-4a35505c-8828-0024817b058c/labmanager/1922/vmware-1.log '.

    16:53:49.164 Dec 08: vmx | GuestRpcSendTimedOut: message to the Toolbox has expired.
    16:54:14.972 Dec 08: vmx | GuestRpcSendTimedOut: message to the Toolbox has expired.
    21:59:05.262 Dec 08: mks | Cannot write the temporary image THUMB
    21:59:15.264 Dec 08: mks | Cannot write the temporary image THUMB
    21:59:30.270 Dec 08: mks | Cannot write the temporary image THUMB
    21:59:35.271 Dec 08: mks | Cannot write the temporary image THUMB
    21:59:45.275 Dec 08: mks | Cannot write the temporary image THUMB
    21:59:50.285 Dec 08: mks | Cannot write the temporary image THUMB
    22:00:00.274 Dec 08: mks | Cannot write the temporary image THUMB
    22:00:05.276 Dec 08: mks | Cannot write the temporary image THUMB
    22:01:15.410 Dec 08: mks | Cannot write the temporary image THUMB
    22:03:25.312 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:00.324 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:05.340 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:15.331 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:20.341 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:30.344 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:35.353 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:40.354 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:45.366 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:50.357 Dec 08: mks | Cannot write the temporary image THUMB
    22:05:55.361 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:00.365 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:05.371 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:10.395 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:15.379 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:20.381 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:30.397 Dec 08: mks | Cannot write the temporary image THUMB
    22:06:40.403 Dec 08: mks | Cannot write the temporary image THUMB
    22:20:45.541 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:10.580 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:15.538 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:20.554 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:25.545 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:30.580 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:35.591 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:40.537 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:45.629 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:50.583 Dec 08: mks | Cannot write the temporary image THUMB
    22:21:55.616 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:00.590 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:05.638 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:10.595 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:15.582 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:20.622 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:25.583 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:30.627 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:35.673 Dec 08: mks | Cannot write the temporary image THUMB
    22:22:40.588 Dec 08: mks | Panic: file lock (was the bug 49968)
    22:22:40.589 Dec 08: mks | Bora/lib/image/imageUtilPng.c:462 unrecoverable memory allocation failure
    22:23:21.438 Dec 08: mks | Backtrace:
    22:23:21.440 Dec 08: mks | Backtrace [0] 0x3ccf63d8 eip 0xa3f88cd
    22:23:21.442 Dec 08: mks | Backtrace [1] 0x3ccf6818 eip 0x9ff705c
    22:23:21.443 Dec 08: mks | Backtrace [2] eip 0xa2803bc 0x3ccf6b88
    22:23:21.443 Dec 08: mks | Backtrace [3] eip 0xa2803f6 0x3ccf6bb8
    22:23:21.444 Dec 08: mks | Backtrace [4] eip 0xa27fcc3 0x3ccf6bd8
    22:23:21.444 Dec 08: mks | Backtrace [5] eip 0xa27fd28 0x3ccf6c28
    22:23:21.445 Dec 08: mks | Backtrace [6] eip 0xa115582 0x3ccf7128
    22:23:21.445 Dec 08: mks | Backtrace [7] eip 0xa115717 0x3ccf7138
    22:23:21.445 Dec 08: mks | Backtrace [8] eip 0xa00d0a9 0x3ccf7168
    22:23:21.446 Dec 08: mks | Backtrace [9] 0x3ccf9278 0xa00dbef eip
    22:23:21.447 Dec 08: mks | Backtrace [10] eip 0x3ccf9298 0xa298217
    22:23:21.447 Dec 08: mks | Backtrace [11] eip 0x3ccf92b8 0xa298255
    22:23:21.448 Dec 08: mks | Backtrace [12] eip 0x3ccf92e8 0xa10bfe9
    22:23:21.448 Dec 08: mks | Backtrace [13] eip 0xa0f2e81 0x3ccf93c8
    22:23:21.504 Dec 08: mks | Backtrace [14] eip 0x160534fb 0x3ccf94b8
    22:23:21.505 Dec 08: mks | Backtrace [15] eip 00000000 0x1613ae3e
    22:23:21.507 Dec 08: mks | SymBacktrace [0] 0x3ccf63d8 eip in function 0xa3f88cd in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.508 Dec 08: mks | SymBacktrace [1] 0x3ccf6818 eip 0x9ff705c panic function in/usr/lib/vmware/bin/vmware-vmx of the object loaded on the 0x9f98000
    22:23:21.508 Dec 08: mks | SymBacktrace [2] 0x3ccf6b88 eip in function 0xa2803bc in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.511 Dec 08: mks | SymBacktrace [3] 0x3ccf6bb8 eip in function 0xa2803f6 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.511 Dec 08: mks | SymBacktrace [4] 0x3ccf6bd8 eip in function 0xa27fcc3 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.512 Dec 08: mks | SymBacktrace [5] 0x3ccf6c28 eip in function 0xa27fd28 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.513 Dec 08: mks | SymBacktrace [6] 0x3ccf7128 eip in function 0xa115582 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.514 Dec 08: mks | SymBacktrace [7] 0x3ccf7138 eip in function 0xa115717 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.515 Dec 08: mks | SymBacktrace [8] 0x3ccf7168 eip in function 0xa00d0a9 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.515 Dec 08: mks | SymBacktrace [9] 0x3ccf9278 eip in function 0xa00dbef in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.516 Dec 08: mks | SymBacktrace [10] 0x3ccf9298 eip in function 0xa298217 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.517 Dec 08: mks | SymBacktrace [11] 0x3ccf92b8 eip in function 0xa298255 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.518 Dec 08: mks | SymBacktrace [12] 0x3ccf92e8 eip in function 0xa10bfe9 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.519 Dec 08: mks | SymBacktrace [13] 0x3ccf93c8 eip in function 0xa0f2e81 in/usr/lib/vmware/bin/vmware-vmx of the object in the 0x9f98000 (zero)
    22:23:21.519 Dec 08: mks | SymBacktrace [14] 0x3ccf94b8 eip 0x160534fb in function (zero) in the object /usr/lib/vmware/lib/libpthread.so.0 to the 0x1604e000
    22:23:21.520 Dec 08: mks | SymBacktrace [15] eip 00000000 0x1613ae3e based on cloning in object /usr/lib/vmware/lib/libc.so.6 loaded in 0 x 16069000
    22:23:21.520 Dec 08: mks | Msg_Post: error
    22:23:21.521 Dec 08: mks | [msg.log.error.unrecoverable] fatal error VMware ESX: (mks)
    22:23:21.521 Dec 08: mks | Bora/lib/image/imageUtilPng.c:462 unrecoverable memory allocation failure
    22:23:21.521 Dec 08: mks | [msg.panic.haveLog] a log file is available in "/ vmfs/volumes/4a4ce277-4a35505c-8828-0024817b058c/labmanager/1922/vmware.log".  [msg.panic.haveCore] a base file is available in "/ vmfs/volumes/4a4ce277-4a35505c-8828-0024817b058c/labmanager/1922/vmware-vmx-zdump.000".  [msg.panic.requestSupport.withLogAndCore] please request support and include the contents of the log file and the base file.  [msg.panic.requestSupport.vmSupport.vmx86]
    22:23:21.523 Dec 08: mks | To collect the data to submit to the VMware support, run 'vm-support.
    22:23:21.524 Dec 08: mks | [msg.panic.response] we will respond on the basis of your entitlement to support.
    22:23:21.525 Dec 08: mks | ----------------------------------------
    22:23:21.739 Dec 08: vmx | Watched VTHREAD thread 1 "mks" is dead
    22:23:22.651 Dec 08: 1 vcpu. Watched VTHREAD thread 0 "vmx" is dead
    22:23:22.740 Dec 08: vcpu-3 | Watched VTHREAD thread 0 "vmx" is dead
    22:23:22.741 Dec 08: vcpu-2 | Watched VTHREAD thread 0 "vmx" is dead
    22:23:22.743 Dec 08: vcpu-0 | Watched VTHREAD thread 0 "vmx" is dead

    I found the suggestion to check the ESX memory for problems.

    I found the information that ESX 3.0 was ramcheck service which could check the memory, but there is no such service in future versions of ESX.

    Could someone help me find how to check the memory without stopping the ESX Server (I could not migrate virtual machines per host)?

    The only way you will get a true test of the memory of the HOST must stop it and run the test directly. Any tool running in the ESX console will only have indirect access RAM. The vmkernel controls access to physical RAM.

  • How to check the Toshiba HDD for the failures and bad sectors?

    Hello

    I didn't really know where post this so im sorry if it's completely irrelevant to anyone, but I have an Alienware laptop and they can not help me (I know what your what to think he done here then?) so I was wondering if anyone knew a software that allows me to check the Toshiba HDD for bad sectors and failures etc.

    I used Hitachi Drive fitness test, but it will not help other that say there are critical and even with the seagate software, all mistakes two loading floopy. It would really help, and I couldn't find anything on the part of the customer support site. The answer probably lies with Alienware, but I can't contact them by phone right now...

    Thanks Khaloi.

    Hello

    The easiest way is to use the Windows operating system error checking option.
    Please go to the "My Computer", right-click on the drive and choose Properties.
    In the 'Tools' tab you will find the error checking. Here, you can mark them automatically fix file system errors and scan for and attempt recovery of bad sectors.

  • How to check if device supports for wifi or not?

    Hello

    I want the code for the wifi and mobile network... If wifi is available then want to go throgh wifi (= wifi interface). How do I know peripheral support for wifi?

    Take a look at this article.

    How to determine if a BlackBerry smartphone takes in charge the features Wi - Fi which is-

    http://www.BlackBerry.com/knowledgecenterpublic/livelink.exe/fetch/2000/348583/800332/832062/How_To _...

    Concerning

    Bika

  • How to check the resources authorized for a specific organization?

    Hello

    I would check the resources authorized for a particular agency.

    I would use resources such as my driver. The cursor will move by resources with a matching name to a string, then I would choose a count (*) of a certain table that correspond to the authorized resources of a given organization. If this counter is zero, then I add this resource list resources allowed for this org.

    I would have 2 sliders, 1 loop on resources and another one through the organization.

    I know that the method getObjectsAllowed (orgKey) will give me a result set of the resource permitted for a body with the orgKey that I spend in. I'll have to loop through the result set. I want to save some coding. So, I thought that if I could put a count (*) selection of... so I don't have to go through authorized resources.

    Is there a way to select a table or a set of tables to get the resources authorized for a given org?

    Thank you

    Khanh

    Refer to the table of the ACP.

    -Kevin

  • How to check the Windows registry for you ensure that it is correct in Vista?

    How a 'clean', or their "Windows registry", to ensure that it is still correct? Windows has a program, or the download for this?
    * original title - how can I check or clean, my Windows registry? Windows have a program, or download for this? *

    Hi rickfaulkner,

    ·         You receive an error message for the registry entries?

    I suggest you follow the provided article and check if it helps.

    http://Windows.Microsoft.com/en-us/Windows7/are-registry-cleaners-necessary

  • How to check if "PO output for communication" uses XLM or OracleReports

    I need to change the purchasing document "Exit IN. for communication", but I must first identify if it uses XML Publisher report or reports of the Oracle.
    How can I check that using the client?

    Any help is welcome.

    Rodrigo

    Hello

    OK, here's what I did to customize the presentation of PO:

    1 create new templates in BI Publisher:

    1.1 Please download the original models:
    In my evolution, I used the original models of Oracle as a starting point. If you get their first:

    Logon with respo XML Publisher administrator and navigate to 'Models' > search model whose name "Standard purchase order Stylesheet" and click on it in the result of the research. Click the download link to download the file .xls on your local drive. You can repeat that for all other models that I mentioned earlier, depending on which layout you want to change.

    I do not recommend to change the original files. In case of problems you can always return to the original version of Oracle.

    1.2 now to create your own templates:
    In XML Publisher administrator, you can create a new template. As model name, use a meaningful name with a prefix such as "XX" or something that you usually use for your own developments.

    The rest of the fields in the template definition must be equal to the standard models (so just copy & paste the values from there). And you can download the original .xsl file to the beginning.

    2 let know to use your own XML Publisher templates:

    connection with a PO administrator/super user responsibility:
    2.1 (by purchase) > Setup > organizations > Options purchases > control tab > set "Output PO Format" = PDF
    2.2 (by purchase) > Setup > purchases > Document Types > find the 'Purchase order - Standard' Document Type > define the presentation of the Document Type = "XX purchase order Stylesheet" (put the name of your custom here template!)

    Repeat step 2.2 for other Types of documents, such as agreements to cover and if necessary press coverage.

    3. test:
    Now try the PO output for communication. If everything has worked, you should see a purchase order as a PDF with the same layout as before. Now it's time to start customizing the layout.

    4 customize the page layout:
    You must change the XSL templates. You need some knowledge of XSL - FO, but with some programming experience little, you will have the concept quite easily. In fact, the XSL - FO offers many possibilities to model your page layout.

    BUT: Change the XSL template to change your "LAYOUT" only, not the data of the report part. Of course you can text coded hard and calculations in your XSL, but dramatic changes of the portion of data are not really possible with this.

    If you want to do, then search on Metalink, there is a document that explains how to customize the data for printing of PO. I don't have the Note in his hand right now...

    BTW. XML Publisher is the former name of the product, Oracle has renamed it BI Publisher. In EBS, it is still often referred to as "XML Editor". You can see the two names as synonyms. You pay more attention to the version of BI Publisher, which is integrated into EBS is different from what you can have as a stand-alone versions.

    Best regards
    David.

  • BlackBerry smartphone how to check my warranty online for the India website.

    Hi team,

    I want to know the warranty for my mobile that I have problems with the battery upward.

    I ask that you please help me on this.

    Check with your carrier first, but here is the warranty information.

    http://www.BlackBerry.com/legal/warranty/handheld.shtml

    Battery information:

    http://us.BlackBerry.com/legal/battery-limited-warranty.html

  • How to check my product ID for Windows 7 and Windows 8 25-digit?

    How to verify my identity of product 25-digit windows 7 and w8

    Windows 7:

    Click Start, right click on computer

    Click on properties

    Scroll down to the Windows Activation

    You will see your product ID

    Windows 8:

    Press Windows + X

    Click System

    Scroll down to the Windows Activation

    You will see your product ID

  • How can I reset code pass for touch pad ID

    How can I reset pass code/ID on iPad 2 Air after start-up when touch ID is active

    If the iPad is locked by a password, you can open your iPad using this password or your contact ID.  Once again, the iPad is on the homescreen go to settings and then scroll up to the key ID and password.  From there, you can change your password and / or your finger Print/s.

  • How to check the language of expression for row.bindings.Attribute1.inputValue begins with "A".

    JDEV 12.1.3.0

    How to check in the expression for row.bindings.Attribute1.inputValue language starts with 'A '?

    Thank you

    Roy

    FN: Substring(Row.Bindings.Segment11.inputValue,0,1) eq ' 1'

  • How to check the page dirty with default values existing in viewObject?

    Hi all

    I use JDeveloper 11.1.1.4.

    I have two pages in my application. I am browsing for page2 page1.

    Before opening page 2 I created new line page 2 notice of object using method 'Create Insert()' with some default values by using the ViewRowImpl class.

    My problem is that I have a button to return to Page 2. If I click the back button, then check the Application module is dirty or not.

    But it always shows AM is dirty due to I'm setting some default values in ViewRowImpl. If I avoid the default values in ViewRowImpl then AM dirty check works fine.

    My Question is how to check the AM (or) dirty Page with default values in the object view?

    My bean Codes:

    Links DCBindingContainer = (DCBindingContainer) BindingContext.getCurrent () .getCurrentBindingsEntry ();

    DataControl dc = bindings.findDataControl("AppModuleDataControl");

    ApplicationModuleImpl am = ((ApplicationModuleImpl) dc.getDataProvider ());

    If (am.getDBTransaction (.isDirty (()))

    {

    return "Page is dirty."

    }

    My Jspx Codes:

    < af:commandLink id = "cl6" text = '2 '.
    shortDesc = "Add Row in Page2"
    actionListener = "#{bindings." Action CreateInsert.execute}' = 'Edit' >

    Thank you

    David...

    see this

    http://www.techartifact.com/blogs/2013/11/how-to-check-ifdirty-is-modified-for-view-object.html

    http://www.jobinesh.com/2011/05/checking-for-dirty-data.html

Maybe you are looking for

  • have a macbook pro 7.1 os 10.7.5 which is the last OS I can update?

    Hi, I have a MacBook Pro 7.1 2010 with Lion O.S.X 10.7.5 model and want to upgrade to the latest operating system compatible. Is someone can you please tell me what OS is compatible safely.

  • Apple Mail vacuum in local folders

    I upgraded to El Capitan a few months ago. I've updated, so I am now on 10.11.3. I'm now migrating to a new Mac, and I am (now) has a lot of old e-mail to keep because we work are empty, indicating that "this message has no content." I always have th

  • Windows Movie Maker-film plays with no audio

    Director of Windows Why, when I try to make a movie in windows movie maker audio work does not work when I press play?

  • Upgrade of windows 8 for windows 10

    How can I upgrade my pc windows 8 for windows 10

  • help please with time STAMP

    Hello gurusJust a little annoyingly Yes, problem here that has pulling me on my eyebrows...ALTER session set nls_date_format = "FM MONTH DD YYYY HH24:mi:SS";Select username, timestamp, userhost, action_name to_char logoff_time in dba_audit_trail;APPS