设为首页 加入收藏

TOP

利用BBED恢复数据文件头(五)
2015-07-24 10:26:45 来源: 作者: 【 】 浏览:5
Tags:利用 BBED 恢复 数据 文件
----------- 54503100 00000000 00000000 00000000 l TP1............. 00000000

ub2 kcvfhtln @336 0x0005

BBED> d /v offset 336
 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5)
 Block: 1       Offsets:  336 to  355  Dba:0x01400001
-------------------------------------------------------
 05005450 31000000 00000000 00000000 l ..TP1...........
 00000000                            l ....

 <16 bytes per line>

BBED> m /x 03 offset 336
 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5)
 Block: 1                Offsets:  336 to  355           Dba:0x01400001
------------------------------------------------------------------------
 03005450 31000000 00000000 00000000 00000000 

 <32 bytes per line>

(10)检查点

BBED> p kcvfhckp
struct kcvfhckp, 36 bytes                   @484     
   struct kcvcpscn, 8 bytes                 @484     
      ub4 kscnbas                           @484      0x0019b1a1   --->1683873
      ub2 kscnwrp                           @488      0x0000
   ub4 kcvcptim                             @492      0x32a59921   -->849713441
   ub2 kcvcpthr                             @496      0x0001
   union u, 12 bytes                        @500     
      struct kcvcprba, 12 bytes             @500     
         ub4 kcrbaseq                       @500      0x00000002
         ub4 kcrbabno                       @504      0x000002e0
         ub2 kcrbabof                       @508      0x0010
   ub1 kcvcpetb[0]                          @512      0x02
   ub1 kcvcpetb[1]                          @513      0x00
   ub1 kcvcpetb[2]                          @514      0x00
   ub1 kcvcpetb[3]                          @515      0x00
   ub1 kcvcpetb[4]                          @516      0x00
   ub1 kcvcpetb[5]                          @517      0x00
   ub1 kcvcpetb[6]                          @518      0x00
   ub1 kcvcpetb[7]                          @519      0x00

sys@PROD> select file#,rfile#,CREATION_TIME,checkpoint_change#,unrecoverable_change#,offline_change# from v$datafile;

     FILE#     RFILE# CREATION_ CHECKPOINT_CHANGE# UNRECOVERABLE_CHANGE# OFFLINE_CHANGE#
---------- ---------- --------- ------------------ --------------------- ---------------
         1          1 23-MAR-14            1683873                     0         1658859
         2          2 23-MAR-14            1683873                     0         1658859
         3          3 23-MAR-14            1683873                     0         1658859
         4          4 23-MAR-14            1683873                     0         1658859
         5          5 29-MAR-14            1684251                     0         1658859

sys@PROD> select to_number('19b1a1','xxxxxxxxxxxx') from dual;

TO_NUMBER('19B1A1','XXXXXXXXXXXX')
----------------------------------
                           1683873
sys@PROD> select to_number('32a59921','xxxxxxxxxxxx') from dual;

TO_NUMBER('32A59921','XXXXXXXXXXXX')
------------------------------------
                           849713441
sys@PROD> select file#,to_char(CHECKPOINT_TIME,'yyyy-mm-dd hh24:mi:ss') createTime,
  2    (to_char(CHECKPOINT_TIME,'yyyy')-1988)*12*31*24*3600+
  3     (to_char(CHECKPOINT_TIME,'mm')-1)*31*24*3600+
  4   (to_char(CHECKPOINT_TIME,'dd')-1)*24*3600+
  5   to_char(CHECKPOINT_TIME,'hh24')*3600+
  6    to_char(CHECKPOINT_TIME,'mi')*60+
  7   to_char(CHECKPOINT_TIME,'ss') createTimeSCN
  8    from v$datafile WHERE file# in(4,5);


     FILE# CREATETIME          CREATETIMESCN
---------- ------------------- -------------
         4 2014-06-08 15:30:41     849713441
         5 2014-06-08 15:38:33     849713913

sys@PROD> sys@PROD> select to_char('1684251','xxxxxxxxxxxxxxx') from dual;

TO_CHAR('1684251
----------------
          19b31b   ====>真正5号文件的检查点SCN

sys@PROD> select to_char('849713913','xxxxxxxxxxxxxxx') from dual;

TO_CHAR('8497139
----------------
        32a59af9  ====>真正5号文件的检查点时间

ub4 kscnbas                           @484      0x0019b1a1     ====>真正5号文件的检查点SCN 19b31b (倒:1bb319)
ub4 kcvcptim                          @492      0x32a59921     ====>真正5号文件的检查点时间32a59af9(倒:f99aa532)

BBED> d /v offset 484
 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5)
 Block: 1       Offsets:  484 to  503  Dba:0x01400001
-------------------------------------------------------
 a1b11900 00000000 2199a532 01000000 l ?±......!.¥2....
 02000000 

BBED> m /x 1bb319 offset 484
 File: /u01/app/oracle/oradata/PROD/tp01
首页 上一页 2 3 4 5 6 下一页 尾页 5/6/6
】【打印繁体】【投稿】【收藏】 【推荐】【举报】【评论】 【关闭】 【返回顶部
分享到: 
上一篇NotesfromDataGuard 下一篇10gRAC使用service实现taf

评论

帐  号: 密码: (新用户注册)
验 证 码:
表  情:
内  容:

·bios设置按什么选择 (2025-12-26 17:20:08)
·知乎 - 知乎 (2025-12-26 17:20:04)
·http://和www.前缀网 (2025-12-26 17:20:01)
·Python爬虫教程(从 (2025-12-26 16:49:14)
·【全269集】B站最详 (2025-12-26 16:49:11)