IBM Support

IBM Security Guardium: SESSION_GUESS exception

Question & Answer


Question

What is SESSION_GUESS exception?

Answer

Session Guess is used for long running sessions which have been closed but not by the user or application. SESSION_GUESS is an exception that indicates the internal sniffer process of 'session guessing' has been attempted.
How it is used:
  • An active session will have GDM_SESSION.INACTIVE_FLAG = 0
  • When a long running session has no activity for a period of time the sniffer will close the session and set the GDM_SESSION.INACTIVE_FLAG to '-1' to free resources.
  • When a session with GDM_SESSION.INACTIVE_FLAG = -1 exceeds the Session Inference Max inactive period (Setup > Tools and Views > Session Inference), the session will be closed and GDM_SESSION.INACTIVE_FLAG = -1 will be set to '2'.
  • Sessions marked with GDM_SESSION.INACTIVE_FLAG = 2 will be aggregated and it will appear as a count in the Sessions Guessed column of Buffer Usage.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Component":"","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"All versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Product Synonym

IBM Guardium

Document Information

Modified date:
20 March 2020

UID

ibm14192875