Some useful <strong>Sybase</strong> CommandsSome useful <strong>Sybase</strong> CommandsTo connect to isql:su - serverusernameisql -Udbuser -Pdbpassword -SservernameAs a result of successful connection you will get prompt ‘>’ for input SQLcommand.Number of audit tables "sysaudits_01", ...>select count(*) from sybsecurity.dbo.sysobjects where name like 'sysaudits%'8 eTrust Audit
eTrust Audit Field Mapping>goNumber of current <strong>Sybase</strong> audit table:>select value from master.dbo.sysconfigures where name = "current audit table">goNumber of records in audit table sysaudits_01:>select count(*) from sybsecurity.dbo.sysaudits_01>go<strong>Sybase</strong> server system time +1 sec:>select (convert(char(10),getdate(),112) +convert(char(8),dateadd(ss,1,getdate()),108)>goeTrust Audit Field MappingThis section describes Audit fields and <strong>Sybase</strong>-specific fields. Since policy rulesdefine actions based on values of specific event fields, this section can be used tofacilitate the creation or maintenance of policy rules for <strong>Sybase</strong> events.<strong>Sybase</strong> Event Types<strong>Sybase</strong> events are logged in table sysaudits_xx (where xx = 01, 02, …, 08). Here isthe list of the fields from this table:event, eventmod, spid, eventtime, sequence, suid, dbid, objid, xactid, loginname,dbname, objname, objowner, extrainfoThe table below describes <strong>Sybase</strong> event types. Each event type is mapped toAudit field ‘ Event ID’.Each type is associated with Audit ‘Category’, ‘ObjClass’ and ‘Operation’ asdefined in the table below:<strong>Sybase</strong> Event Tableevent Category ObjClass Operation1 Security Systems DATABASE sp_addauditrecord2 Administration DATABASE Alter3 Object Access TABLE Alter4 Object Access TABLE bcp6 Object Access TABLE sp_bindefault7 Object Access TABLE sp_bindmsg9