04 bbed修复system文件头损坏
04 bbed修复system文件头损坏
1 启动数据库，查看trace，在mount到open，
SQL> startup mount;
ORACLE instance started. Total System Global Area 784998400 bytes
Fixed Size 2257352 bytes
Variable Size 511708728 bytes
Database Buffers 264241152 bytes
Redo Buffers 6791168 bytes
Database mounted.
SQL> alter session set events '10046 trace name context forever,level 8'; Session altered. SQL> alter database open; Database altered. SQL> alter session set events '10046 trace name context off'; Session altered. SQL> select value from v$diag_info where name='Default Trace File'; VALUE
------------------------------------------------------------------
/u01/app/oracle/diag/rdbms/orcl/orcl/trace/orcl_ora_11247.trc
查看文件，在启动的是，先检查各个数据文件的1号块
[oracle@DSI ~]$ more /u01/app/oracle/diag/rdbms/orcl/orcl/trace/orcl_ora_11247.trc
WAIT #139760412634104: nam='control file sequential read' ela= 2 file#=0 block#=23 blocks=1 obj#=-1 tim=1557884751568850
WAIT #139760412634104: nam='db file sequential read' ela= 3 file#=1 block#=1 blocks=1 obj#=-1 tim=1557884751568874 ##数据文件1的1号块
WAIT #139760412634104: nam='db file sequential read' ela= 1 file#=2 block#=1 blocks=1 obj#=-1 tim=1557884751568894
WAIT #139760412634104: nam='db file sequential read' ela= 2 file#=3 block#=1 blocks=1 obj#=-1 tim=1557884751568911
WAIT #139760412634104: nam='db file sequential read' ela= 1 file#=4 block#=1 blocks=1 obj#=-1 tim=1557884751568922
WAIT #139760412634104: nam='db file sequential read' ela= 1 file#=5 block#=1 blocks=1 obj#=-1 tim=1557884751568929
2 system数据文件1号块损坏修复
测试之前先做冷备，防止修复不成功
[oracle@DSI oradata]$ cp -rf orcl/ /home/oracle/.
BBED> info
File# Name Size(blks)
----- ---- ----------
1 /u01/app/oracle/oradata/orcl/system01.dbf 94720
2 /u01/app/oracle/oradata/orcl/sysaux01.dbf 76800
3 /u01/app/oracle/oradata/orcl/undotbs01.dbf 144640
4 /u01/app/oracle/oradata/orcl/users01.dbf 640
5 /u01/app/oracle/oradata/orcl/test01.dbf 6400
BBED> set file 1 block 1
FILE# 1
BLOCK# 1
BBED> map /v
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Dba:0x00400001
------------------------------------------------------------
Data File Header
struct kcvfh, 860 bytes @0
struct kcvfhbfh, 20 bytes @0
struct kcvfhhdr, 76 bytes @20
ub4 kcvfhrdb @96
struct kcvfhcrs, 8 bytes @100
ub4 kcvfhcrt @108
ub4 kcvfhrlc @112
struct kcvfhrls, 8 bytes @116
ub4 kcvfhbti @124
struct kcvfhbsc, 8 bytes @128
ub2 kcvfhbth @136
ub2 kcvfhsta @138
struct kcvfhckp, 36 bytes @484
ub4 kcvfhcpc @140
ub4 kcvfhrts @144
ub4 kcvfhccc @148
struct kcvfhbcp, 36 bytes @152
ub4 kcvfhbhz @312
struct kcvfhxcd, 16 bytes @316
sword kcvfhtsn @332
ub2 kcvfhtln @336
text kcvfhtnm[30] @338
ub4 kcvfhrfn @368
struct kcvfhrfs, 8 bytes @372
ub4 kcvfhrft @380
struct kcvfhafs, 8 bytes @384
ub4 kcvfhbbc @392
ub4 kcvfhncb @396
ub4 kcvfhmcb @400
ub4 kcvfhlcb @404
ub4 kcvfhbcs @408
ub2 kcvfhofb @412
ub2 kcvfhnfb @414
ub4 kcvfhprc @416
struct kcvfhprs, 8 bytes @420
struct kcvfhprfs, 8 bytes @428
ub4 kcvfhtrt @444
ub4 tailchk @8188 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 0 to 511 Dba:0x00400001
------------------------------------------------------------------------
0ba20000 01004000 00000000 00000104 9bec0000 00000000 0004200b cf766f5b
4f52434c 00000000 c0170000 00770100 00200000 01000300 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
08024000 07000000 00000000 512bfa3b 4f2bfa3b 01000000 00000000 00000000
00000000 00000000 00000420 8c000000 b993173c 8b000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 06005359 5354454d 00000000 00000000
00000000 00000000 00000000 00000000 01000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 0a000a00
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 21fd1700 00000000 3e171a3c 01000000 75000000 1e7b0000 10000000
<32 bytes per line>
模拟损坏，用4号文件的10号块覆盖1号文件1号块
BBED> copy file 4 block 10 to file 1 block 1
Warning: contents of previous BIFILE will be lost. Proceed? (Y/N) y
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 0 to 511 Dba:0x00400001
------------------------------------------------------------------------
1ea20000 0a000001 553e0000 00000104 a6010000 04000000 80403600 00000000
00000000 00f80000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
BBED> sum apply
Check value for File 1, Block 1:
current = 0x01a6, required = 0x01a6
#正常关闭不了数据库，直接abort
SQL> shutdown immediate
ORA-01122: database file 1 failed verification check
ORA-01110: data file 1: '/u01/app/oracle/oradata/orcl/system01.dbf'
ORA-01210: data file header is media corrupt
SQL> shutdown abort
ORACLE instance shut down.
SQL> startup
ORACLE instance started.
Total System Global Area 784998400 bytes
Fixed Size 2257352 bytes
Variable Size 511708728 bytes
Database Buffers 264241152 bytes
Redo Buffers 6791168 bytes
Database mounted.
ORA-01122: database file 1 failed verification check
ORA-01110: data file 1: '/u01/app/oracle/oradata/orcl/system01.dbf'
ORA-01210: data file header is media corrupt
#只能启动到mount阶段，提示需要介质恢复
BBED> set file 1 block 1
FILE# 1
BLOCK# 1 BBED> map /v
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Dba:0x00400001
------------------------------------------------------------
BBED-00400: invalid blocktype (30) ##查看文件，提示无效数据块
构造文件头结构
用2号文件的1号块覆盖给1号文件1号块
BBED> set file 2 block 1
FILE# 2
BLOCK# 1 BBED> map /v
File: /u01/app/oracle/oradata/orcl/sysaux01.dbf (2)
Block: 1 Dba:0x00800001
------------------------------------------------------------
Data File Header
BBED> copy file 2 block 1 to file 1 block 1
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 0 to 511 Dba:0x00400001
------------------------------------------------------------------------
0ba20000 01008000 00000000 00000104 c4d80000 00000000 0004200b cf766f5b
4f52434c 00000000 c0170000 003b0100 00200000 02000300 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 07070000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000
00000000 00000000 00000400 8c000000 b993173c 8b000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 01000000 06005359 53415558 00000000 00000000
00000000 00000000 00000000 00000000 02000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 21fd1700 00000000 3e171a3c 01000000 75000000 1e7b0000 10000000 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 1:
current = 0xd8c4, required = 0xd8c4
查看文件头的结构
BBED> set file 1 block 1
FILE# 1
BLOCK# 1 BBED> map /v
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Dba:0x00400001
------------------------------------------------------------
Data File Header
BBED修复文件头
1. rdba_kcbh(offset 4) 文件头block的rdba地址
2. kccfhfsz (offset 44) 文件大小
3. kccfhfno (offset 52) datafile文件号
4. kcvfhrdb (offset 96) root dba
5. kscnbas (offset 100) v$datafile.creation_change#
6. kcvfhcrt (offset 108) v$datafile.creation_time
7. kcvfhsta (offset 138) 文件状态
8. kcvfhtsn (offset 332) 表空间号v$datafile.ts#
9.kcvfhtln (offset 336) 表空间名称字符长度
10. kcvfhtnm (offset 338) 表空间名称v$tablespace.name
11. kcvfhrfn (offset 368) 相对文件号v$datafile.rfile#
12. kscnbas (offset 484) checkpoint scn
13.kcvcptim (offset 492) last checkpoint time
14.kcvfhcpc (offset 144) Datafile checkpoint count
1 BBED修复文件头block的rdba地址
BBED> p kcvfhbfh
struct kcvfhbfh, 20 bytes @0
ub4 rdba_kcbh @4 0x00800001
rdba地址转换
SQL> select dbms_utility.data_block_address_file(TO_NUMBER('800001','XXXXXXXX')) file_id,dbms_utility.data_block_address_block(TO_NUMBER('800001','XXXXXXXX')) block_id from dual;
32个字节，前10个bit文件号，后22个bit块号
0000 0000 1000 >>0000 0000 10 得出是2号文件，现在要修改为1号文件0000 0000 0100>>0x00400001 转换成十六进制
BBED修复文件头block的rdba地址 ( Cont … )
BBED> set file 1 block 1 offset 4 count 32
FILE# 1
BLOCK# 1
OFFSET 4
COUNT 32
BBED> dump ##查看值
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 4 to 35 Dba:0x00400001
------------------------------------------------------------------------
01008000 00000000 00000104 c4d80000 00000000 0004200b cf766f5b 4f52434c
<32 bytes per line>
BBED> modify /x 01004000 offset 4 ##修改
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 4 to 35 Dba:0x00400001
------------------------------------------------------------------------
01004000 00000000 00000104 c4d80000 00000000 0004200b cf766f5b 4f52434c <32 bytes per line>
BBED> sum apply ##提交
Check value for File 1, Block 1:
current = 0xd804, required = 0xd804
BBED> dump ##再次查看，已经修改为01004000
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 4 to 35 Dba:0x00400001
------------------------------------------------------------------------
01004000 00000000 00000104 04d80000 00000000 0004200b cf766f5b 4f52434c
<32 bytes per line>
2 BBED修复文件头的文件大小
BBED> p kcvfhhdr
ub4 kccfhfsz @44 0x00013b00
从系统层面查看system数据文件的大小
[oracle@DSI orcl]$ ll -l |grep system*
-rw-r----- 1 oracle oinstall 786440192 May 15 15:32 system01.dbf
计算大小
SQL> select (786440192-8192)/8192 from dual; ##-8192是减去os层面的0号块
(786440192-8192)/8192
---------------------
96000
SQL> select to_char(96000,'xxxxxxxxxxxxxxx') from dual; TO_CHAR(96000,'X
----------------
17700
BBED> set file 1 block 1 offset 44 count 32
FILE# 1
BLOCK# 1
OFFSET 44
COUNT 32
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 44 to 75 Dba:0x00400001
------------------------------------------------------------------------
003b0100 00200000 02000300 00000000 00000000 00000000 00000000 00000000 <32 bytes per line>
BBED> modify /x 00770100 ##需要把17700反一下，先补全00017700,然后在反
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 44 to 75 Dba:0x00400001
------------------------------------------------------------------------
00770100 00200000 02000300 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
BBED> sum apply
Check value for File 1, Block 1:
current = 0x9404, required = 0x9404
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 44 to 75 Dba:0x00400001
------------------------------------------------------------------------
00770100 00200000 02000300 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
3 BBED修复文件头的文件号
BBED> p kcvfhhdr
ub2 kccfhfno @52 0x0002
BBED> set file 1 block 1 offset 52 count 32
FILE# 1
BLOCK# 1
OFFSET 52
COUNT 32
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 52 to 83 Dba:0x00400001
------------------------------------------------------------------------
02000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
BBED> modify /x 01 offset 52
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 52 to 83 Dba:0x00400001
------------------------------------------------------------------------
01000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
BBED> sum apply
Check value for File 1, Block 1:
current = 0x9407, required = 0x9407
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 52 to 83 Dba:0x00400001
------------------------------------------------------------------------
01000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
4 BBED修复文件头的root数据块号
SQL> select fhrdb,FHFNO from x$kcvfh order by 2;
FHRDB FHFNO
---------- ----------
4194824 1
SQL> select to_char(4194824,'xxxxxxxxxx') from dual;
TO_CHAR(419
-----------
400208
SQL> select dbms_utility.data_block_address_file(TO_NUMBER('400208',
'XXXXXXXX')) file_id,dbms_utility.data_block_address_block(TO_NUMBER('400208', 'XXXXXXXX'))
block_id from dual;
FILE_ID BLOCK_ID
---------- ----------
1 520 =>1号文件520号块
SQL> select to_char(520,'xxxxxxxxxxxxxxxxxxx') from dual;
TO_CHAR(520,'XXXXXXX
--------------------
208 =>00400208
BBED> p kcvfhrdb
ub4 kcvfhrdb @96 0x00000000
BBED> set file 1 block 1 offset 96 count 32
FILE# 1
BLOCK# 1
OFFSET 96
COUNT 32
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 96 to 127 Dba:0x00400001
------------------------------------------------------------------------
00000000 07070000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000
<32 bytes per line>
BBED> modify /x 08024000 ##同样这里也取反
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 96 to 127 Dba:0x00400001
------------------------------------------------------------------------
08024000 07070000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000
<32 bytes per line>
BBED> sum apply
Check value for File 1, Block 1:
current = 0x964f, required = 0x964f
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 96 to 127 Dba:0x00400001
------------------------------------------------------------------------
08024000 07070000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000
<32 bytes per line>
5 BBED修复文件头的文件创建SCN
BBED> p kcvfhcrs
struct kcvfhcrs, 8 bytes @100
ub4 kscnbas @100 0x00000707
ub2 kscnwrp @104 0x0000
SQL> select file#,creation_change# from v$datafile;
1 7
2 1799
3 2821
4 15940
5 929531
SQL> select to_char(1799,'xxxxxxxxxxxx') from dual;
TO_CHAR(1799,
-------------
707
BBED> set file 1 block 1 offset 100 count 32
FILE# 1
BLOCK# 1
OFFSET 100
COUNT 32
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 100 to 131 Dba:0x00400001
------------------------------------------------------------------------
07070000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000 00000000
<32 bytes per line>
BBED> modify /x 07000000 offset 100 ###由于这里是用的2号文件的1号块覆盖的，所以这里的值是2号文件的707，要修改为7
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 100 to 131 Dba:0x00400001
------------------------------------------------------------------------
07000000 00000000 522bfa3b 4f2bfa3b 01000000 00000000 00000000 00000000
<32 bytes per line>
BBED> sum apply
Check value for File 1, Block 1:
current = 0x914f, required = 0x914f
6 BBED修复文件头的文件创建时间
BBED> p kcvfhcrt
ub4 kcvfhcrt @108 0x3bfa2b52 BBED> set file 1 block 1 offset 108 count 32
FILE# 1
BLOCK# 1
OFFSET 108
COUNT 32 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 108 to 139 Dba:0x00400001
------------------------------------------------------------------------
522bfa3b 4f2bfa3b 01000000 00000000 00000000 00000000 00000000 00000400 <32 bytes per line>
SQL> select file#,to_char(creation_time,'yyyy-mm-dd hh24:mi:ss') creation_time_file,
(to_char(creation_time,'yyyy')-1988)*12*31*24*3600+
(to_char(creation_time,'mm')-1)*31*24*3600
+(to_char(creation_time,'dd')-1)*24*3600
+to_char(creation_time,'hh24')*3600
+to_ 2 3 4 5 6 char(creation_time,'mi')*60
+to_char(creation_time,'ss') creation_name_scn
from v$datafile order by 1; 7 8 FILE# CREATION_TIME_FILE CREATION_NAME_SCN
---------- ------------------- -----------------
1 2019-04-22 10:07:13 1006250833
2 2019-04-22 10:07:14 1006250834
3 2019-04-22 10:07:15 1006250835
4 2019-04-22 10:07:20 1006250840
5 2019-04-22 17:12:12 1006276332
SQL> select to_char(1006250833,'xxxxxxxxxxxx') from dual;
TO_CHAR(10062
-------------
3bfa2b51
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 108 to 139 Dba:0x00400001
------------------------------------------------------------------------
522bfa3b 4f2bfa3b 01000000 00000000 00000000 00000000 00000000 00000400 <32 bytes per line>
BBED> modify /x 512bfa3b offset 108 ##取反，如果这里报错无效的number，则分开修改 108,109,110,111
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 108 to 139 Dba:0x00400001
------------------------------------------------------------------------
512bfa3b 4f2bfa3b 01000000 00000000 00000000 00000000 00000000 00000400 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 1:
current = 0x914c, required = 0x914c
7 BBED修复文件头的文件状态
BBED> p offset 138
kcvfh.kcvfhsta
--------------
ub2 kcvfhsta @138 0x0004 (KCVFHOFZ) BBED> set file 1 block 1 offset 138 count 32
FILE# 1
BLOCK# 1
OFFSET 138
COUNT 32 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 138 to 169 Dba:0x00400001
------------------------------------------------------------------------
04008c00 0000b993 173c8b00 00000000 00000000 00000000 00000000 00000000 <32 bytes per line>
#当一个datafile处于fuzzy状态的时候，其kcvfhsta为0x04，这里是abort关闭，状态时04，不修改，如果是正常关闭，则是0x2000
8 BBED修复文件头的表空间号
BBED> p kcvfhtsn
sword kcvfhtsn @332 1 BBED> set file 1 block 1 offset 332 count 32
FILE# 1
BLOCK# 1
OFFSET 332
COUNT 32
BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 332 to 363 Dba:0x00400001
------------------------------------------------------------------------
01000000 06005359 53415558 00000000 00000000 00000000 00000000 00000000
<32 bytes per line>
SQL> select file#,ts# from v$datafile; FILE# TS#
---------- ----------
1 0
2 1
3 2
4 4
5 5
BBED> modify /x 00 offset 332 ##这里是system数据文件，ts为0
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 332 to 363 Dba:0x00400001
------------------------------------------------------------------------
00000000 06005359 53415558 00000000 00000000 00000000 00000000 00000000 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 1:
current = 0x914d, required = 0x914d
9 BBED修复文件头的表空间长度
BBED> p kcvfhtln
ub2 kcvfhtln @336 0x0006 BBED> p kcvfhtnm
text kcvfhtnm[0] @338 S
text kcvfhtnm[1] @339 Y
text kcvfhtnm[2] @340 S
text kcvfhtnm[3] @341 A
text kcvfhtnm[4] @342 U
text kcvfhtnm[5] @343 X
SYSTEM表空间长度一致
10 BBED修复文件头的表空间名称
BBED> p kcvfhtnm
text kcvfhtnm[0] @338 S
text kcvfhtnm[1] @339 Y
text kcvfhtnm[2] @340 S
text kcvfhtnm[3] @341 A
text kcvfhtnm[4] @342 U
text kcvfhtnm[5] @343 X
修改为SYSTEM
BBED> set file 1 block 1 offset 338 count 32
FILE# 1
BLOCK# 1
OFFSET 338
COUNT 32 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 338 to 369 Dba:0x00400001
------------------------------------------------------------------------
53595341 55580000 00000000 00000000 00000000 00000000 00000000 00000200 <32 bytes per line>
SQL> select dump('SYSTEM',16) from dual; DUMP('SYSTEM',16)
-------------------------------
Typ=96 Len=6: 53,59,53,54,45,4d
BBED> set file 1 block 1 offset 341 ##直接从341偏移量开始修改，前面SYS都一样
FILE# 1
BLOCK# 1
OFFSET 341 BBED> modify /x 54454d
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 341 to 372 Dba:0x00400001
------------------------------------------------------------------------
54454d00 00000000 00000000 00000000 00000000 00000000 00000002 00000000 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 1:
current = 0x915d, required = 0x915d
11 BBED修复文件头的相对文件号
BBED> p kcvfhrfn
ub4 kcvfhrfn @368 0x00000002 BBED> set file 1 block 1 offset 368
FILE# 1
BLOCK# 1
OFFSET 368 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 368 to 399 Dba:0x00400001
------------------------------------------------------------------------
02000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 <32 bytes per line>
SQL> select file#,rfile# from v$datafile; FILE# RFILE#
---------- ----------
1 1
2 2
3 3
4 4
5 5
BBED> modify /x 01 offset 368 #修改为对于的 RFILE
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 368 to 399 Dba:0x00400001
------------------------------------------------------------------------
01000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 1:
current = 0x915e, required = 0x915e
12 BBED修复文件头的检查点SCN
BBED> p kcvfhckp
struct kcvfhckp, 36 bytes @484
struct kcvcpscn, 8 bytes @484
ub4 kscnbas @484 0x0017fd21
ub2 kscnwrp @488 0x0000
ub4 kcvcptim @492 0x3c1a173e
SQL> set pagesize 999
SQL> set linesize 999
SQL> select file#,CREATION_CHANGE#,CHECKPOINT_CHANGE# ,UNRECOVERABLE_CHANGE#,LAST_CHANGE#,OFFLINE_CHANGE# from v$datafile order by 1; FILE# CREATION_CHANGE# CHECKPOINT_CHANGE# UNRECOVERABLE_CHANGE# LAST_CHANGE# OFFLINE_CHANGE#
---------- ---------------- ------------------ --------------------- ------------ ---------------
1 7 1572129 0 0
2 1799 1572129 0 0
3 2821 1572129 0 0
4 15940 1572129 0 0
5 929531 1572129 0 0
SQL> select to_char(1572129,'xxxxxxxxxxxxxxxx') from dual; TO_CHAR(1572129,'
-----------------
17fd21
这里的值跟 ub4 kscnbas @484 0x0017fd21是一样的，不用修改
13 BBED修复文件头的检查点时间
BBED> set file 1 block 1 offset 492
FILE# 1
BLOCK# 1
OFFSET 492 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 1 Offsets: 492 to 523 Dba:0x00400001
------------------------------------------------------------------------
3e171a3c 01000000 75000000 1e7b0000 10000000 02000000 00000000 00000000 <32 bytes per line>
select file#,to_char(CHECKPOINT_TIME,'yyyy-mm-dd hh24:mi:ss')
CHECKPOINT_TIME_file,
(to_char(CHECKPOINT_TIME,'yyyy')-1988)*12*31*24*3600
+(to_char(CHECKPOINT_TIME,'mm')-1)*31*24*3600
+(to_char(CHECKPOINT_TIME,'dd')-1)*24*3600
+to_char(CHECKPOINT_TIME,'hh24')*3600
+to_char(CHECKPOINT_TIME,'mi')*60
+to_char(CHECKPOINT_TIME,'ss') CHECKPOINT_TIME_scn
from v$datafile order by 1;
SQL> select file#,to_char(CHECKPOINT_TIME,'yyyy-mm-dd hh24:mi:ss')
CHECKPOINT_TIME_file,
(to_char(CHECKPOINT_TIME,'yyyy')-1988)*12*31*24*3600
+(to_char(CHECKPOINT_TIME,'mm')-1)*31*24*3600
+(to_char(CHECKPOINT_TIME,'dd')-1)*24*3600
+to_char(CHECKPOINT_TIME,'hh24 2 3 4 5 6 ')*3600
+to_char(CHECKPOINT_TIME,'mi')*60
+to_char(CHECKPOINT_TIME,'ss') CHECKPOINT_TIME_scn
from v$datafile order by 1; 7 8 9 FILE# CHECKPOINT_TIME_FIL CHECKPOINT_TIME_SCN
---------- ------------------- -------------------
1 2019-05-15 15:14:06 1008342846
2 2019-05-15 15:14:06 1008342846
3 2019-05-15 15:14:06 1008342846
4 2019-05-15 15:14:06 1008342846
5 2019-05-15 15:14:06 1008342846
SQL> select to_char(1008342846,'xxxxxxxxxxxxxxxxxxxxxxx') from dual; TO_CHAR(1008342846,'XXXX
------------------------
3c1a173e 这里的值与ub4 kcvcptim @492 0x3c1a173e一样，不用修改
通过dbv检查下文件头修改是否都正确
[oracle@DSI ~]$ dbv file=/u01/app/oracle/oradata/orcl/system01.dbf start=1 end=2
DBVERIFY: Release 11.2.0.4.0 - Production on Wed May 15 16:48:53 2019
Copyright (c) 1982, 2011, Oracle and/or its affiliates. All rights reserved.
DBVERIFY - Verification starting : FILE = /u01/app/oracle/oradata/orcl/system01.dbf
DBVERIFY - Verification complete Total Pages Examined : 2
Total Pages Processed (Data) : 0
Total Pages Failing (Data) : 0
Total Pages Processed (Index): 0
Total Pages Failing (Index): 0
Total Pages Processed (Other): 2
Total Pages Processed (Seg) : 0
Total Pages Failing (Seg) : 0
Total Pages Empty : 0
Total Pages Marked Corrupt : 0
Total Pages Influx : 0
Total Pages Encrypted : 0
Highest block SCN : 1352932 (0.1352932)
SQL> alter database open;
Database altered.
这里成功打开数据库
如果打开数据库报错，根据提示再检查修改相应的块内容
如果是提示控制文件太旧
方法一：修改checkpoint count
kcvfhcpc (offset 144) Datafile checkpoint count
kcvfhccc (offset 148) Controlfile Checkpoint Count
kcvfhcpc>kcvfhccc+1 一般是这样
方法二：手工创建control file
测试题目：
1.模拟2号文件头损坏恢复的实验（详细操作步骤）
--这里2号文件跟1号文件类似，不用修改4. kcvfhrdb (offset 96) root dba
2.Oracle 11g 没有备份的情况下，1号文件520号块坏了，还能恢复吗?
如果不能恢复请给出原因?如果能恢复请给出方法和思路？
不能简单的从其他块进行覆盖修改，这里没有其他的文件快可以替换，结构都不一样，不清楚这个520号块的作用，是否可以从其他实例cp这520号块
查看本地其他数据文件的520号块
BBED> set file 1 block 1
FILE# 1
BLOCK# 1
BBED> p offset 520
pad
---
ub1 pad @520 0x00 BBED> set file 1 block 520
FILE# 1
BLOCK# 520 BBED> map /v
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 520 Dba:0x00400208
------------------------------------------------------------
Unlimited Data Segment Header struct kcbh, 20 bytes @0
ub1 type_kcbh @0
ub1 frmt_kcbh @1
ub1 spare1_kcbh @2
ub1 spare2_kcbh @3
ub4 rdba_kcbh @4
ub4 bas_kcbh @8
ub2 wrp_kcbh @12
ub1 seq_kcbh @14
ub1 flg_kcbh @15
ub2 chkval_kcbh @16
ub2 spare3_kcbh @18 struct ktech, 72 bytes @20
ub4 spare1_ktech @20
sword tsn_ktech @24
ub4 lastmap_ktech @28
ub4 mapcount_ktech @32
ub4 extents_ktech @36
ub4 blocks_ktech @40
ub2 mapend_ktech @44
struct hwmark_ktech, 32 bytes @48
struct locker_ktech, 8 bytes @80
ub4 flag_ktech @88 struct ktemh, 16 bytes @92
ub4 count_ktemh @92
ub4 next_ktemh @96
ub4 obj_ktemh @100
ub4 flag_ktemh @104 struct ktetb[1], 8 bytes @108
ub4 ktetbdba @108
ub4 ktetbnbk @112 struct ktshc, 8 bytes @4148
ub2 ktshcnxf @4148
ub2 ktshcnfl @4150
ub2 ktshcnfb @4152
ub1 ktshctyp @4154 struct ktsfs_seg[1], 20 bytes @4156
ub2 ktsfsflg @4156
struct ktsfsxid, 8 bytes @4160
ub4 ktsfslhd @4168
ub4 ktsfsltl @4172 struct ktsfs_txn[16], 320 bytes @4176
ub2 ktsfsflg @4176
struct ktsfsxid, 8 bytes @4180
ub4 ktsfslhd @4188
ub4 ktsfsltl @4192 ub4 tailchk @8188 BBED> dump
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 520 Offsets: 0 to 511 Dba:0x00400208
------------------------------------------------------------------------
10a20000 08024000 b9010000 00000204 43e40000 00000000 00000000 00000000
00000000 01000000 07000000 20100000 00000000 03000000 07000000 0c024000
00000000 00000000 01000000 03000000 00000000 00000000 00000000 01000000
00000000 3b000000 00000040 09024000 07000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 <32 bytes per line> BBED> set file 2 block 520
FILE# 2
BLOCK# 520 BBED> map /v
File: /u01/app/oracle/oradata/orcl/sysaux01.dbf (2)
Block: 520 Dba:0x00800208
------------------------------------------------------------
BBED-00400: invalid blocktype (32) BBED> p offset 520
BBED-00400: invalid blocktype (32) BBED> set file 3 block 520
FILE# 3
BLOCK# 520 BBED> p offset 520
freespace[478]
--------------
ub1 freespace[478] @520 0x00 BBED> map /v
File: /u01/app/oracle/oradata/orcl/undotbs01.dbf (3)
Block: 520 Dba:0x00c00208
------------------------------------------------------------
Undo Data struct kcbh, 20 bytes @0
ub1 type_kcbh @0
ub1 frmt_kcbh @1
ub1 spare1_kcbh @2
ub1 spare2_kcbh @3
ub4 rdba_kcbh @4
ub4 bas_kcbh @8
ub2 wrp_kcbh @12
ub1 seq_kcbh @14
ub1 flg_kcbh @15
ub2 chkval_kcbh @16
ub2 spare3_kcbh @18 struct ktubh, 22 bytes @20
struct ktubhxid, 8 bytes @20
ub2 ktubhseq @28
ub1 ktubhcnt @30
ub1 ktubhirb @31
ub1 ktubhicl @32
ub1 ktubhflg @33
ub2 ktubhidx[4] @34 ub1 freespace[7806] @42 ub1 undodata[340] @7848 ub4 tailchk @8188
查看并修改1号文件520号块
SQL> select distinct dbms_rowid.rowid_relative_fno(rowid) file#,
dbms_rowid.rowid_block_number(rowid) block#
from bootstrap$; 2 3 FILE# BLOCK#
---------- ----------
1 521
1 523
1 522
查看并修改1号文件520号块
BBED> info
File# Name Size(blks)
----- ---- ----------
1 /u01/app/oracle/oradata/orcl/system01.dbf 94720
2 /u01/app/oracle/oradata/orcl/sysaux01.dbf 76800
3 /u01/app/oracle/oradata/orcl/undotbs01.dbf 144640
4 /u01/app/oracle/oradata/orcl/users01.dbf 640
5 /u01/app/oracle/oradata/orcl/test01.dbf 6400
这里从别处cp一个system01数据文件过来，由于这个是单实例，我从一个rac集群拷贝一个system过来试试
ASMCMD> cp SYSTEM.259.1001364555 /tmp/.
copying +data/bol/datafile/SYSTEM.259.1001364555 -> /tmp/./SYSTEM.259.1001364555
[grid@rac03 tmp]$ scp SYSTEM.259.1001364555 oracle@10.15.7.25:/tmp/.
[oracle@DSI ~]$ vim filelist.txt
[oracle@DSI ~]$ bbed
BBED> info
File# Name Size(blks)
----- ---- ----------
1 /u01/app/oracle/oradata/orcl/system01.dbf 94720
2 /u01/app/oracle/oradata/orcl/sysaux01.dbf 76800
3 /u01/app/oracle/oradata/orcl/undotbs01.dbf 144640
4 /u01/app/oracle/oradata/orcl/users01.dbf 640
5 /u01/app/oracle/oradata/orcl/test01.dbf 6400
6 /u01/app/oracle/oradata/orcl/SYSTEM.259.1001364555 0 BBED> copy file 6 block 520 to file 1 block 520
Warning: contents of previous BIFILE will be lost. Proceed? (Y/N) y
File: /u01/app/oracle/oradata/orcl/system01.dbf (1)
Block: 520 Offsets: 0 to 511 Dba:0x00400208
------------------------------------------------------------------------
10a20000 08024000 d0010000 00000204 43e40000 00000000 00000000 00000000
00000000 01000000 07000000 20100000 00000000 03000000 07000000 0c024000
00000000 00000000 01000000 03000000 00000000 00000000 00000000 01000000
00000000 3b000000 00000040 09024000 07000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 <32 bytes per line> BBED> sum apply
Check value for File 1, Block 520:
current = 0xe443, required = 0xe443
启动成功
SQL> startup
ORACLE instance started. Total System Global Area 784998400 bytes
Fixed Size 2257352 bytes
Variable Size 511708728 bytes
Database Buffers 264241152 bytes
Redo Buffers 6791168 bytes
Database mounted.
Database opened.
3.以下SQL中的1988是怎么得来的？
select file#,to_char(creation_time,'yyyy-mm-dd hh24:mi:ss') creation_time_file,
(to_char(creation_time,'yyyy')-1988)*12*31*24*3600+
(to_char(creation_time,'mm')-1)*31*24*3600
+(to_char(creation_time,'dd')-1)*24*3600
+to_char(creation_time,'hh24')*3600
+to_ 2 3 4 5 6 char(creation_time,'mi')*60
+to_char(creation_time,'ss') creation_name_scn
from v$datafile order by 1;
--数据库记录时间起点
1988/01/01 00:00:00
04 bbed修复system文件头损坏的更多相关文章
- 使用BBED恢复数据文件头
转载请注明出处:http://blog.csdn.net/guoyjoe/article/details/31018075 @@@@@@@利用BBED模拟损坏5文件1号块(文件头) BBED> ...
- 利用BBED恢复数据文件头
转载请注明出处:http: @@@@@@@利用BBED模拟损坏5文件1号块(文件头) BBED block block ) Block: Dba:0x01400001 ---------------- ...
- 因下面文的损坏或丢失windows/system32/config/system 解决方法
这是因为你电脑的初始化文件遭破坏所致.导致破坏的原因也可能是病毒或其它原因. 因为Windows启动须要读取Syatem.ini,Win.ini和注冊表文件,假设C盘根文件夹下有config.sys, ...
- ubuntu16.04+pycharm+默认文件头注释
安装 1.sudo gedit /etc/hosts 2.最后一行添加 0.0.0.0 account.jetbrains.com 3.从 http://idea.lanyus.com/ 中获取激活码 ...
- 关于数据文件的文件头1-P2
文章目录 1 疑问点 2 问题模拟 2.1 dump 0,1块 2.2 查看trc文件 2.3 如何查看 1 疑问点 这里引用p2处的一段话: 事实上,每个文件的前128个块,都是文件头,被Oracl ...
- 常用文件的文件头(附JAVA测试类)
1. MIDI (mid),文件头:4D546864 2. JPEG (jpg),文件头:FFD8FF 3. PNG (png),文件头:89504E47 4. GIF (gif),文件头:47494 ...
- PE文件格式详解,第二讲,NT头文件格式,以及文件头格式
PE文件格式详解,第二讲,NT头文件格式,以及文件头格式 作者:IBinary出处:http://www.cnblogs.com/iBinary/版权所有,欢迎保留原文链接进行转载:) PS:本篇博客 ...
- XBMC源代码分析 6：视频播放器（dvdplayer）-文件头（以ffmpeg为例）
XBMC分析系列文章: XBMC源代码分析 1:整体结构以及编译方法 XBMC源代码分析 2:Addons(皮肤Skin) XBMC源代码分析 3:核心部分(core)-综述 XBMC源代码分析 4: ...
- 使用dd备份和恢复ASM中的数据文件头
这里用大家随处可见的(除了extent分布的x$kffxp需要百度和google外),其余都是文档中有详细记载的常用ASM视图来实现同样功能: 下面的用于从ASM中备份数据文件头: SQL> s ...
随机推荐
- spark(3)
0.spark -------------------------------------------- transformation map filter repartition spark核心AP ...
- Spring Boot实现SAAS平台的基本思路
一.SAAS是什么 SaaS是Software-as-a-service(软件即服务)它是一种通过Internet提供软件的模式,厂商将应用软件统一部署在自己的服务器 上,客户可以根据自己实际需求,通 ...
- mail - 发送和接收邮件
SYNOPSIS(总览) mail [-iInv ] [-s subject ] [-c cc-addr ] [-b bcc-addr ] to-addr... mail [-iInNv -f ] [ ...
- 使用node来搭建简单的后台业务
现在作为一个前端开发人员,越来越多的技术需要学习,近几天学习了下node.js,在很多前端以及后端应用了该技术,现在记录下自己摸索的一些简单的知识记录下来. 我的博客都是直接分享应用方法,没有说明一些 ...
- linux capalibities
linux进程能力管理 安装能力查看工具集 yum install libcap-ng-utils 主要包含以下工具 [root@thatsit ~]# rpm -ql libcap-ng-utils ...
- AtCoder Regular Contest 066 E - Addition and Subtraction Hard （结论+DP）
Time limit : 2sec / Memory limit : 256MB Score : 900 points Problem Statement Joisino has a formula ...
- 树莓派上固定ip
sudo nano /etc/dhcpcd.conf interface eth0 static ip_address=192.168.123.99/24 static routers=192.168 ...
- C#基础知识之SharpZipLib压缩解压的使用
项目中使用 Velocity 将模板和生成的动态内容(HTML.XML等)合并保存到redis数据库中,考虑到压缩的文件容量会比较小,方便传输而且存储所使用的空间也会比较小,所以要压缩一下,读取的时候 ...
- Kali Linux的发展史，专为数字取证和渗透测试而设计
Kali Linux拥有非常强大的网络功能,Kali Linux是一个Debian衍生的Linux发行版,专为数字取证和渗透测试而设计.它是由OffensiveSecurityLtd维护和资助,是由M ...
- Python---进阶---logging---装饰器打印日志2
### logging - logging.debug - logging.info - logging.warning - logging.error - logging.critical ---- ...