good to hear that it works now.
I was just looking up a note that will be relevant for your problem. That is on My Oracle Support:
414170.1. (corrected the note-id)
The most likely cause of your error is a mismatch in the GUEST password. (Even though you’ll never guess from the error).

Hope everything will be well in your family.

Regards,

Arian

I used to have some scripts for it, that I used for forensic research. But it’s been a long time that I needed them, so I can’t find them yet. I’ll go look for them and if I can find them, I’ll send them.
They show information like: IP-addresses used by a user, login attempts from IP-addresses, condensed session flow for a user, etc.

Regards,

Arian

The redirection to the modules is not logged in the access_log. So you’ll have to find out based on the request being made. It’s easy to spot modplsql and forms requests. modplsql will contain the DAD: /pls/.
for example “GET /pls/TEST/OracleMyPage.home”, which will request (part of) the personal home page.
When you are using forms server, the forms sessions are only logged in access_log on starting forms. The request will look like: “GET dev60cgi/f60cgi?……” dev60cgi/f60cgi refers to the forms executable, which happens to be a cgi-script. After the forms session is started, there is no further logging for that session in access_log.

Jserv is called by a number of different requests, since all java will be processed by it. In some cases, the request looks exactly the same as a regular HTML request. But you can look for: /servlets/, /oa_servlets/ and /OA_JAVA/ those names in the request will show that a java servlet or class is loaded.

Assuming you use normal windows clients (no Citrix, or similar) you can select clients by their IP-address.

So to follow the flow of a session, just do a grep on the ip-address: grep ’192.168.0.1′ access_log. This will show the requests in their right order. The first request for a session will be to ‘AppsLogin’, or ‘AppsLocalLogin’. From there you can follow the flow.

Regards,

Arian