Oracle 11.2.0.2 XE
Oracle Linux 5
I've inherited this db. It was put up by my predecessor as a skunk-works project to support a mobile app. The app is not business critical. From what I can find out it simply delivers a daily (or on demand?) inspirational greeting card. No one here really knows exactly what it's purpose is. I've been told that the app itself is no longer available for download, as the app delivery server has been taken down. I am trying to answer the question of if the db is even used. I enabled AUDIT SESSION and between that and analyzing the listener log, I come up with listener log entries like this:
[oracle]$ grep handoff listener.log |grep "02-AUG-2016"
02-AUG-2016 00:57:33 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=120.***.**.***)(PORT=58743)) * handoff * http * 0
02-AUG-2016 03:22:06 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=1.***.***.**)(PORT=1139)) * handoff * http * 0
02-AUG-2016 03:47:00 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=222.***.**.**)(PORT=3408)) * handoff * http * 0
where all of the host ip addresses are outside of our network.
A matching audit entry reports that the connecting user is ANONYMOUS.
There are more listener entries that audit entries. I just enabled auditing yesterday. But since that time, I have one such audit record, with a timestamp of 02-AUG-2016 03:22:06. Compare with above. Auditing was enabled at 14:47 on 1 Aug.
So, what are these listener.log entries telling me? I've never seen that "handoff" reference before. What can I deduce from the above?
And FWIW, this db is in the DMZ, over the objections of my predecessor who put it up in the first place.
-- edit
Also, I just noticed that the account ANONYMOUS, as recorded in the audit trail, has a lock_date of null and an expiry_date of . . . 24-FEB-2012 22:18:40 !!!