Getting Started with Adobe After Effects - Part 6: Motion Blur


Upload Image Close it
Select File

Learn about SQL Server DBA, SQL Server database performance,SQL Server optimisation,database tuning,t-sql,ssis
Browse by Tags · View All
DBA Scripts 51
performance 37
SQL Server 29
Object Management 24
#SQLServer 24
Backup and Restore 20
Security Management 20
Powershell 17
Indexes 14
DBA 14

Archive · View All
June 2011 38
January 2011 33
May 2011 32
August 2011 27
July 2011 26
January 2012 24
February 2011 19
April 2011 19
March 2011 17
March 2012 17

Jack Vamvas's Blog

SQL Traces and c2 auditing are different

Dec 12 2011 12:00AM by Jack Vamvas   

Sometimes end users interchange the terms : C2 auditing and Traces.
They server different purposes.

c2 auditing records all attempts (successfull and failed) on objects and statements. Typically a SQL Server DBA will use a c2 audit to monitor security compliance .

A trace will will monitor an event or a series of events. Events can be any source producing a trace events. Examples are deadlocks and DTC transactions, SQL Server Backups.Read BOL for a comprehensive list of events

To view if c2 auditing is turned on use:

--To view if c2 auditing is turned on use:

EXEC sp_configure 'c2 audit mode'

--To view if traces including user defined ones are running on SQL server 2005 use:

SELECT * FROM sys.fn_trace_getinfo(0) ;
Republished with author's permission. See the original post here.


Republished from SQL Server DBA [65 clicks].  Read the original version here [32134 clicks].

Jack Vamvas
5 · 27% · 8528
2
 
0
Lifesaver
 
0
Refreshed
 
0
Learned
 
0
Incorrect



Submit

1  Comments  

  • Here are a few more confusing things about auditing and traces:

    C2 auditing was augemented with Common Criteria auditing. The C2 security standard (a US standard) has been superceded by the Common Criteria EAL1+ standard (an international standard). There is also an extension available for CC EAL4+ compliance.

    C2 Compliance and Common Critieria auditing are both implemented through SQL Trace. So it's not a choice of one or the other, it's a choice of roll-your-own vs. using what's in place.

    You can configure SQL Server 2008 R2 use enable either C2 auditing or Common Criteria auditing through sp_configure. C2/Common Criteria auditing has very little in the way of configurability. It's either on or off. You can configure the location of the tracefile (defaults to SQL Server's directory) and the size of the file, but these are done through T-SQL. I don't believe these options are available thorugh SSMS. Traces are very configurable, using either SQL Server Profiler or SQL Trace. You can also configure traces using stored procedures:

    sp_trace_create
    sp_trace_setevent 
    sp_trace_setfilter
    

    A common set of advice is to only enable C2 Auditing or Common Criteria auditing ONLY if you are specifically required to be compliant with a specific standard. Frankly, these generate a TON of information, most of which will never be used. In the cases of C2 and Common Criteria, if audit logs can't be written (due to lack of disk space), the server shuts itself down. If auditing is set to start automatically, SQL Server will refuse to come back up until there is space for audit records to be written.

    If you need auditability for something other than specific compliance with C2 or Common Criteria, create a trace or set of traces which will provide the information that you need. If you set the traces to start automatically and use the option to shut down SQL Server if audit records can't be written, then be absolutely sure that you have enough disk space or you might get an unpleasant surprise.

    commented on Jan 2 2012 1:55PM
    Marc Jellinek
    97 · 2% · 545

Your Comment


Sign Up or Login to post a comment.

"SQL Traces and c2 auditing are different" rated 5 out of 5 by 2 readers
SQL Traces and c2 auditing are different , 5.0 out of 5 based on 2 ratings
    Copyright © Rivera Informatic Private Ltd Contact us      Privacy Policy      Terms of use      Report Abuse      Advertising      [ZULU1097]