• On check les process les plus consommateurs :

oracle@machine::9.2.0:/apps/oracle/ ps -ef |grep oracle|grep LOCAL |awk '{ if ($4>50) print $2}'
9486516

• Une session SQL Plus permet d'obtenir plus d'infos :

oracle@machine:XXXXXXXX:9.2.0:/apps/oracle/ su - oracle
oracle@machine:XXXXXXXX:9.2.0:/apps/oracle/ export ORACLE_SID=XXXXXXXX
oracle@machine:XXXXXXXX:9.2.0:/apps/oracle/ sqlplus ...

SQL*Plus: Release 9.2.0.6.0 - Production on Tue Jul 24 10:42:59 2007

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.


Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - 64bit Production
JServer Release 9.2.0.6.0 - Production

SQL> set linesize 300
SQL> col machine format A10
SQL> select a.username, a.osuser,a.machine, b.spid, b.pid
  2  from v$session a, v$process b
  3  where a.paddr = b.addr and b.spid=9486516;

USERNAME                       OSUSER                         MACHINE    SPID                PID
------------------------------ ------------------------------ ---------- ------------ ----------
SADMIN                         AdmMOE                         WORKGROUP\ 9486516              32
                                                              SERVER

• On vérifie que ça concorde :

oracle@machine:SIE1WDP0:9.2.0:/apps/oracle/ lsof -a -i:1521 -p 9486516
COMMAND     PID   USER   FD   TYPE             DEVICE  SIZE/OFF NODE NAME
oracle  9486516 oracle   38u  IPv4 0xf10000f004ce8b58 0t2229122  TCP machine1:1521->machine2.fr.net.intra:6951

• On va faire un tour sur la machine distante (ici un Windows) :

netstat -an

• Et on détermine le process incriminé :

[TCP] D:\sea752_F\siebsrvr\bin\siebsh.exe
    PID:     6496
    State:   ESTABLISHED
    Local:   machine2.fr.net.intra:6951
    Remote:  machine1.fr.net.intra:1521