IBM Support

Missing MySQL socket traffic in Guardium reports

Troubleshooting


Problem

No socket connection to MySQL database traffic is showing in Guardium reports

Symptom

In Guardium reports there is traffic for TCP type connections, but not for IPC type in the Network Protocol Field

Cause

When the unix_domain_socket_marker is set to NULL (default) this will use the default socket mysql.sock. If the socket is different (for example mysqld.sock) this will not log traffic from this socket.

Resolving The Problem

Verify and set the unix_domain_socket_marker parameter in the guard_tap.ini described here: http://www-01.ibm.com/support/docview.wss?uid=swg21653221

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22003896