利用BBED恢复数据文件头(五)

2015-07-24 10:26:45 · 作者: · 浏览: 19
----------- 54503100 00000000 00000000 00000000 l TP1............. 00000000

ub2 kcvfhtln @336 0x0005

BBED> d /v offset 336
 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5)
 Block: 1       Offsets:  336 to  355  Dba:0x01400001
-------------------------------------------------------
 05005450 31000000 00000000 00000000 l ..TP1...........
 00000000                            l ....

 <16 bytes per line>

BBED> m /x 03 offset 336
 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5)
 Block: 1                Offsets:  336 to  355           Dba:0x01400001
------------------------------------------------------------------------
 03005450 31000000 00000000 00000000 00000000 

 <32 bytes per line>

(10)检查点

BBED> p kcvfhckp
struct kcvfhckp, 36 bytes                   @484     
   struct kcvcpscn, 8 bytes                 @484     
      ub4 kscnbas                           @484      0x0019b1a1   --->1683873
      ub2 kscnwrp                           @488      0x0000
   ub4 kcvcptim                             @492      0x32a59921   -->849713441
   ub2 kcvcpthr                             @496      0x0001
   union u, 12 bytes                        @500     
      struct kcvcprba, 12 bytes             @500     
         ub4 kcrbaseq                       @500      0x00000002
         ub4 kcrbabno                       @504      0x000002e0
         ub2 kcrbabof                       @508      0x0010
   ub1 kcvcpetb[0]                          @512      0x02
   ub1 kcvcpetb[1]                          @513      0x00
   ub1 kcvcpetb[2]                          @514      0x00
   ub1 kcvcpetb[3]                          @515      0x00
   ub1 kcvcpetb[4]                          @516      0x00
   ub1 kcvcpetb[5]                          @517      0x00
   ub1 kcvcpetb[6]                          @518      0x00
   ub1 kcvcpetb[7]                          @519      0x00

sys@PROD> select file#,rfile#,CREATION_TIME,checkpoint_change#,unrecoverable_change#,offline_change# from v$datafile;

     FILE#     RFILE# CREATION_ CHECKPOINT_CHANGE# UNRECOVERABLE_CHANGE# OFFLINE_CHANGE#
---------- ---------- --------- ------------------ --------------------- ---------------
         1          1 23-MAR-14            1683873                     0         1658859
         2          2 23-MAR-14            1683873                     0         1658859
         3          3 23-MAR-14            1683873                     0         1658859
         4          4 23-MAR-14            1683873                     0         1658859
         5          5 29-MAR-14            1684251                     0         1658859

sys@PROD>
select to_number('19b1a1','xxxxxxxxxxxx') from dual; TO_NUMBER('19B1A1','XXXXXXXXXXXX') ---------------------------------- 1683873 sys@PROD> select to_number('32a59921','xxxxxxxxxxxx') from dual; TO_NUMBER('32A59921','XXXXXXXXXXXX') ------------------------------------ 849713441 sys@PROD> select file#,to_char(CHECKPOINT_TIME,'yyyy-mm-dd hh24:mi:ss') createTime, 2 (to_char(CHECKPOINT_TIME,'yyyy')-1988)*12*31*24*3600+ 3 (to_char(CHECKPOINT_TIME,'mm')-1)*31*24*3600+ 4 (to_char(CHECKPOINT_TIME,'dd')-1)*24*3600+ 5 to_char(CHECKPOINT_TIME,'hh24')*3600+ 6 to_char(CHECKPOINT_TIME,'mi')*60+ 7 to_char(CHECKPOINT_TIME,'ss') createTimeSCN 8 from v$datafile WHERE file# in(4,5); FILE# CREATETIME CREATETIMESCN ---------- ------------------- ------------- 4 2014-06-08 15:30:41 849713441 5 2014-06-08 15:38:33 849713913 sys@PROD> sys@PROD> select to_char('1684251','xxxxxxxxxxxxxxx') from dual; TO_CHAR('1684251 ---------------- 19b31b ====>真正5号文件的检查点SCN sys@PROD> select to_char('849713913','xxxxxxxxxxxxxxx') from dual; TO_CHAR('8497139 ---------------- 32a59af9 ====>真正5号文件的检查点时间 ub4 kscnbas @484 0x0019b1a1 ====>真正5号文件的检查点SCN 19b31b (倒:1bb319) ub4 kcvcptim @492 0x32a59921 ====>真正5号文件的检查点时间32a59af9(倒:f99aa532) BBED> d /v offset 484 File: /u01/app/oracle/oradata/PROD/tp01.dbf (5) Block: 1 Offsets: 484 to 503 Dba:0x01400001 ------------------------------------------------------- a1b11900 00000000 2199a532 01000000 l ?±......!.¥2.... 02000000 BBED> m /x 1bb319 offset 484 File: /u01/app/oracle/oradata/PROD/tp01