We have this 8.1.6 production database running in our DMZ area. The end user of
our application keep complaining their connection get dropped intermittently
for no reason. I test out the connection from a couple of PCs in our intranet
by connecting to this database in the DMZ area and found out the connection
gets dropped periodically also. From the test connections I ran, it can last
from 45 minutes to 6 hours before it gets dropped. I don't want to turn the
trace on because this is too random and it might pose a negative impact on the
database server by leaving trace on too long. Our network people ran some
sniffer capture and detect that the firewall is dropping the connection to the
database in the DMZ area because it is receiving bad TCP packets from the
I also include below the description of this problem from the developer who
interacts with our clients directly since he has the first hand information,
while I'm the backend DBA:
Users from our intranet work with a web based interface, normally the software
client is MS Internet Explorer.
On the interface they have some screens that allow them to read, edit, and
insert data into tables located in the server outside the firewall.
From time to time they get the following two error messages when trying to
connect to the outside server
ORA-02068: following severe error from OPSWEB ORA-03113: end-of-file on
ORA-02068: following severe error from OPSWEB ORA-03114: not connected to
>Our network people ran some sniffer capture and detect that
>the firewall is dropping the connection to the database in the
>DMZ area because it is receiving bad TCP packets from the
If the connection is idle, the Oracle session should just sit on a Waiting for "SQL*Net message from client" wait event
Why are any packets (never mind bad packets) being sent over an idle session?
The only thing I can think of is Dead Connection Detection to check the client is still alive.
What is the value of sqlnet.expire_time in the sqlnet.ora on the server?
Also, as a matter of interest, how many network cards do you have on the server?