Включение аудита подключений

show parameter audit_trail alter system set audit_trail=DB scope=spfile; shut immediate startup audit connect; connect good_user/good_pass connect bad_user/bad_pass connect / as sysdba noaudit connect; select * from sys.aud$