lsof应用实例分享以及Oracle数据文件删除恢复测试(二)
G 8,2 93508 391082 /lib/libselinux.so.1
init 1 root 10u FIFO 0,16 0t0 1322 /dev/initctl
⑤ 查找某个用户的所有网络连接
[plain]
[root@temp ~]# lsof -a -u oracle -i
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
sqlplus 5631 oracle 7u IPv4 42558 0t0 UDP localhost.localdomain:52493
oracle 11233 oracle 15u IPv4 42442 0t0 UDP localhost.localdomain:62999
oracle 11255 oracle 14u IPv4 42529 0t0 UDP localhost.localdomain:18473
oracle 11255 oracle 15u IPv4 42530 0t0 TCP *:4048 (LISTEN)
oracle 11257 oracle 14u IPv4 42540 0t0 UDP localhost.localdomain:8690
oracle 11260 oracle 22u IPv4 42728 0t0 UDP *:12147
⑥ 查找所有打开的网络连接
[plain]
类似的：
lsof -i tcp
lsof -i udp
lsof -i tcp:80
[root@temp ~]# lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
cupsd 3062 root 4u IPv4 8720 0t0 TCP localhost.localdomain:ipp (LISTEN)
cupsd 3062 root 6u IPv4 8723 0t0 UDP *:ipp
portmap 3600 rpc 3u IPv4 9798 0t0 UDP *:sunrpc
portmap 3600 rpc 4u IPv4 9799 0t0 TCP *:sunrpc (LISTEN)
rpc.statd 3636 rpcuser 3u IPv4 9992 0t0 UDP *:dhcp-failover2
rpc.statd 3636 rpcuser 6u IPv4 9978 0t0 UDP *:844
rpc.statd 3636 rpcuser 7u IPv4 10005 0t0 TCP *:850 (LISTEN)
hpiod 3890 root 0u IPv4 12249 0t0 TCP localhost.localdomain:2208 (LISTEN)
hpssd.py 3895 root 4u IPv4 12267 0t0 TCP localhost.localdomain:2207 (LISTEN)
sshd 3908 root 3u IPv6 12303 0t0 TCP *:ssh (LISTEN)
sshd 3908 root 4u IPv4 12305 0t0 TCP *:ssh (LISTEN)
sendmail 3939 root 4u IPv4 12415 0t0 TCP localhost.localdomain:smtp (LISTEN)
avahi-dae 4149 avahi 13u IPv4 12875 0t0 UDP *:mdns
avahi-dae 4149 avahi 14u IPv6 12876 0t0 UDP *:mdns
avahi-dae 4149 avahi 15u IPv4 12877 0t0 UDP *:8990
avahi-dae 4149 avahi 16u IPv6 12878 0t0 UDP *:6857
dnsmasq 4169 nobody 5u IPv4 13032 0t0 UDP *:bootps
dnsmasq 4169 nobody 6u IPv4 13038 0t0 TCP 192.168.122.1:domain (LISTEN)
dnsmasq 4169 nobody 7u IPv4 13039 0t0 UDP 192.168.122.1:domain
cimserver 4172 cimsrvr 7u IPv6 13141 0t0 TCP *:wbem-https (LISTEN)
dhclient 4721 root 5u IPv4 13899 0t0 UDP *:bootpc
sqlplus 5631 oracle 7u IPv4 42558 0t0 UDP localhost.localdomain:52493
httpd 10278 root 3u IPv6 37812 0t0 TCP *:http (LISTEN)
㈡ 数据文件恢复测试
原理：
后台进程会维护一个文件列表、锁定打开的文件
对Oracle而言、如果文件被删除、但该文件句柄尚未被关闭、则可通过lsof输出看到标识为deleted
通过 proc 的文件目录、能找到该文件句柄信息、这便是Oracle的数据文件
[plain]
** 测试之前****
[oracle@temp datafile]$ ls -alh
total 1.3G
drwxr-x--- 2 oracle oinstall 4.0K May 9 20:37 .
drwxr-xr-x 5 oracle oinstall 4.0K Jul 17 2012 ..
-rw-r----- 1 oracle oinstall 101M Jun 19 14:19 o1_mf_example_8050jhm7_.dbf
-rw-r----- 1 oracle oinstall 81M Jun 19 14:19 o1_mf_ggs_data_8rq64t53_.dbf
-rw-r----- 1 oracle oinstall 271M Jun 19 19:00 o1_mf_sysaux_8050fk3w_.dbf
-rw-r----- 1 oracle oinstall 491M Jun 19 18:56 o1_mf_system_8050fk2z_.dbf
-rw-r----- 1 oracle oinstall 33M Jun 17 22:00 o1_mf_temp_8050j34j_.tmp