测试环境 
OS:redhat6.6 
oracle:12.1.0.2 
 BBED(OracleBlockBrowerandEDitor Tool),用来直接查看和修改数据文件数据的一个工具,是Oracle一款内部工具,可以直接修改Oracle数据文件块的内容,在一些极端恢复场景下比较有用。该工具不受Oracle支持,所以默认是没有生成可执行文件的,在使用前需要重新连接。 
1.安装BBED 
[oracle@12cdock software]$ cp bbedus.msb $ORACLE_HOME/rdbms/mesg 
[oracle@12cdock software]$ cp sbbdpt.o $ORACLE_HOME/rdbms/lib 
[oracle@12cdock software]$ cp ssbbded.o $ORACLE_HOME/rdbms/lib 
[oracle@12cdock software]$ cd $ORACLE_HOME/rdbms/lib/ 
[oracle@12cdock lib]$ make -f ins_rdbms.mk $ORACLE_HOME/rdbms/lib/bbed 

Linking BBED utility (bbed) 
rm -f /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/bbed 
/u01/app/oracle/product/12.1.0.2/db_1/bin/orald -o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/bbed -m64 -z noexecstack -Wl, 
–disable-new-dtags -L/u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/ -L/u01/app/oracle/product/12.1.0.2/db_1/lib/ -L/u01/app/oracle/product/12.1.0.2/db_1/lib/stubs/   
/u01/app/oracle/product/12.1.0.2/db_1/lib/s0main.o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/ssbbded.o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/sbbdpt.o  
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags`    -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -ldbtools12 -lclntsh -lclntshcore   
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags`    -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnro12  
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags`    -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnnz12 -lzt12 -lztkg12 -lztkg12 -lclient12 -lnnetd12  -lvsn12 -lcommon12 -lgeneric12 -lmm -lsnls12 -lnls12  -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12  
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags`   -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnro12  
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags`    -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lclient12 -lnnetd12  -lvsn12 -lcommon12 -lgeneric12   -lsnls12 -lnls12  -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lclient12 -lnnetd12  -lvsn12 -lcommon12 -lgeneric12 -lsnls12 -lnls12  -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12   
 `cat /u01/app/oracle/product/12.1.0.2/db_1/lib/sysliblist` -Wl,-rpath,/u01/app/oracle/product/12.1.0.2/db_1/lib -lm    
 `cat /u01/app/oracle/product/12.1.0.2/db_1/lib/sysliblist` -ldl -lm   -L/u01/app/oracle/product/12.1.0.2/db_1/lib 
[oracle@12cdock lib]$ cp bbed /u01/app/oracle/product/12.1.0.2/db_1/bin/ 
BBED是Oracle 内部使用的命令,所以Oracle 不提供技术支持。 为了安全BBED设置了口令保护,默认密码为blockedit。 
[oracle@12cdock lib]$ bbed 
Password:  

BBED: Release 2.0.0.0.0 – Limited Production on Wed Feb 22 09:47:07 2017 

Copyright (c) 1982, 2014, Oracle and/or its affiliates.  All rights reserved. 

************* !!! For Oracle Internal Use only !!! *************** 

BBED> show  
FILE#          0 
BLOCK#         1 
OFFSET         0 
DBA            0x00000000 (0 0,1) 
FILENAME       
BIFILE         bifile.bbd 
LISTFILE       
BLOCKSIZE      8192 
MODE           Browse 
EDIT           Unrecoverable 
IBASE          Dec 
OBASE          Dec 
WIDTH          80 
COUNT          512 
LOGFILE        log.bbd 
SPOOL          No 

将现有数据文件在bbed中指定,没有的话先在sqlplus中创建 
BBED> set filename ‘/u01/app/oracle/oradata/ORCL/datafile/test.dbf’ 
FILENAME       /u01/app/oracle/oradata/ORCL/datafile/test.dbf 

BBED> show all; 
FILE#          0 
BLOCK#         1 
OFFSET         0 
DBA            0x00000000 (0 0,1) 
FILENAME       /u01/app/oracle/oradata/ORCL/datafile/test.dbf 
BIFILE         bifile.bbd 
LISTFILE       
BLOCKSIZE      8192 
MODE           Browse 
EDIT           Unrecoverable 
IBASE          Dec 
OBASE          Dec 
WIDTH          80 
COUNT          512 
LOGFILE        log.bbd 
SPOOL          No 

2.使用参数文件连接BBED 
a)查询出当前的数据文件并保存在文本文件中 
SQL>spool psdb_file.txt 
SQL> select file#||’ ‘||name||’ ‘||bytes from v$datafile ; 

FILE#||”||NAME||”||BYTES 
——————————————————————————– 
1 /data/oradata/ocrl/datafile/system01.dbf 912261120 
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440 
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480 
4 /data/oradata/ocrl/datafile/users01.dbf 28835840 
5 /data/oradata/ocrl/datafile/test.dbf 10485760 
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760 

6 rows selected. 

SQL> spool off 
注意:保存在文件里的文件号要与我们数据库查询出来的FILE#相同 
ocrl:/home/oracle@oracle1>cat psdb_file.txt  
1 /data/oradata/ocrl/datafile/system01.dbf 912261120 
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440 
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480 
4 /data/oradata/ocrl/datafile/users01.dbf 28835840 
5 /data/oradata/ocrl/datafile/test.dbf 10485760 
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760 

b)BBED使用参数文件登陆 
[oracle@12cdock ~]$cat psdb_file.txt  
1 /data/oradata/ocrl/datafile/system01.dbf 912261120 
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440 
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480 
4 /data/oradata/ocrl/datafile/users01.dbf 28835840 
5 /data/oradata/ocrl/datafile/test.dbf 10485760 
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760 

[oracle@12cdock ~]$cat bbed_parameter.txt  
blocksize=8192 
listfile=/home/oracle/psdb_file.txt 
mode=edit 
ocrl:/home/oracle@oracle1>bbed parfile=/home/oracle/bbed_parameter.txt  
Password:  

BBED: Release 2.0.0.0.0 – Limited Production on Tue Feb 21 15:17:57 2017 

Copyright (c) 1982, 2014, Oracle and/or its affiliates.  All rights reserved. 

************* !!! For Oracle Internal Use only !!! *************** 

BBED> info 
 File#  Name                                                        Size(blks) 
 —–  —-                                                        ———- 
     1  /data/oradata/ocrl/datafile/system01.dbf                        111360 
     2  /data/oradata/ocrl/datafile/sysaux01.dbf                        152320 
     3  /data/oradata/ocrl/datafile/undotbs01.dbf                        93440 
     4  /data/oradata/ocrl/datafile/users01.dbf                           3520 
     5  /data/oradata/ocrl/datafile/test.dbf                              1280 
     6  /data/oradata/ocrl/datafile/tstest.dbf                            1280 

BBED>  

3.破坏system表空间文件 
注意:这里最好先做好备份 
ocrl:/data/oradata/ocrl/datafile@oracle1>cp system01.dbf system01.dbf.bak 
切换日志模拟生产交易,更新SCN 
SQL> alter system switch logfile;//多切几次 

System altered. 

SQL> / 

System altered. 

SQL> / 

System altered. 

SQL> / 

System altered. 

SQL> / 

System altered. 

SQL> / 

System altered. 

SQL>  
把旧的system文件直接复制替换掉新的 
ocrl:/data/oradata/ocrl/datafile@oracle1>cp system01.dbf.bak system01.dbf 
再次切换日志模拟生产交易 
SQL> alter system switch logfile; 

System altered. 

SQL> / 

System altered. 

SQL> / 

alter system switch logfile 

ERROR at line 1: 
ORA-03113: end-of-file on communication channel 
Process ID: 9115 
Session ID: 20 Serial number: 33669 
出现问题,数据库直接宕掉 

ocrl:/home/oracle@oracle1>sqlplus /  as sysdba 

SQL*Plus: Release 12.1.0.2.0 Production on Tue Feb 21 14:53:47 2017 

Copyright (c) 1982, 2014, Oracle.  All rights reserved. 

Connected to an idle instance. 

SQL> startup 
ORACLE instance started. 

Total System Global Area  754974720 bytes 
Fixed Size    2928968 bytes 
Variable Size  524291768 bytes 
Database Buffers  222298112 bytes 
Redo Buffers    5455872 bytes 
Database mounted. 
ORA-01113: file 1 needs media recovery 
ORA-01110: data file 1: ‘/data/oradata/ocrl/datafile/system01.dbf’ 

SQL> col name for a50 
SQL> select name,checkpoint_change# from v$datafile; 

NAME   CHECKPOINT_CHANGE# 
————————————————– —————— 
/data/oradata/ocrl/datafile/system01.dbf     12717804 
/data/oradata/ocrl/datafile/sysaux01.dbf     12717804 
/data/oradata/ocrl/datafile/undotbs01.dbf     12717804 
/data/oradata/ocrl/datafile/users01.dbf     12717804 
/data/oradata/ocrl/datafile/test.dbf     12717804 
/data/oradata/ocrl/datafile/tstest.dbf     12717804 

6 rows selected. 
scn 转换成16进制 
SQL> select to_char(12717804,’xxxxxxxx’) from dual; 

TO_CHAR(1 
——— 
   c20eec 

SQL> select name,checkpoint_change# from v$datafile_header; 

NAME   CHECKPOINT_CHANGE# 
————————————————– —————— 
/data/oradata/ocrl/datafile/system01.dbf     12717402 
/data/oradata/ocrl/datafile/sysaux01.dbf     12717804 
/data/oradata/ocrl/datafile/undotbs01.dbf     12717804 
/data/oradata/ocrl/datafile/users01.dbf     12717804 
/data/oradata/ocrl/datafile/test.dbf     12717804 
/data/oradata/ocrl/datafile/tstest.dbf     12717804 

6 rows selected. 
可以看到数据库system01.dbf的scn点为12717402明显是用的备份的数据文件。oracle在open数据库时要对控制文件,数据文件头的scn进行检查,一致才能打开,所以这里我们通过ddeb来修改数据文件头让它和其他的数据文件的scn相同,达到起库的目的。 
登陆bbed 
ocrl:/home/oracle@oracle1>bbed parfile=bbed_parameter.txt  
Password:  

BBED: Release 2.0.0.0.0 – Limited Production on Tue Feb 21 14:58:25 2017 

Copyright (c) 1982, 2014, Oracle and/or its affiliates.  All rights reserved. 

************* !!! For Oracle Internal Use only !!! *************** 
用bbed查询bbed01数据文件结构信息 
BBED> set dba 1,1 
DBA            0x00400001 (4194305 1,1) 
Bbed查看kcvfh信息 
BBED> p kcvfhckp 
struct kcvfhckp, 36 bytes                   @484      
   struct kcvcpscn, 8 bytes                 @484      
      ub4 kscnbas                           @484      0x00c20d5a 
      ub2 kscnwrp                           @488      0x0000 
   ub4 kcvcptim                             @492      0x37d28348 
   ub2 kcvcpthr                             @496      0x0001 
   union u, 12 bytes                        @500      
      struct kcvcprba, 12 bytes             @500      
         ub4 kcrbaseq                       @500      0x000000bb 
         ub4 kcrbabno                       @504      0x00000002 
         ub2 kcrbabof                       @508      0x0010 
   ub1 kcvcpetb[0]                          @512      0x02 
   ub1 kcvcpetb[1]                          @513      0x00 
   ub1 kcvcpetb[2]                          @514      0x00 
   ub1 kcvcpetb[3]                          @515      0x00 
   ub1 kcvcpetb[4]                          @516      0x00 
   ub1 kcvcpetb[5]                          @517      0x00 
   ub1 kcvcpetb[6]                          @518      0x00 
   ub1 kcvcpetb[7]                          @519      0x00 

BBED> set filename ‘/data/oradata/ocrl/datafile/system01.dbf’ 
FILENAME       /data/oradata/ocrl/datafile/system01.dbf 

BBED> p kcvfhckp 
struct kcvfhckp, 36 bytes                   @484      
   struct kcvcpscn, 8 bytes                 @484      
      ub4 kscnbas                           @484      0x00c20d5a 
      ub2 kscnwrp                           @488      0x0000 
   ub4 kcvcptim                             @492      0x37d28348 
   ub2 kcvcpthr                             @496      0x0001 
   union u, 12 bytes                        @500      
      struct kcvcprba, 12 bytes             @500      
         ub4 kcrbaseq                       @500      0x000000bb 
         ub4 kcrbabno                       @504      0x00000002 
         ub2 kcrbabof                       @508      0x0010 
   ub1 kcvcpetb[0]                          @512      0x02 
   ub1 kcvcpetb[1]                          @513      0x00 
   ub1 kcvcpetb[2]                          @514      0x00 
   ub1 kcvcpetb[3]                          @515      0x00 
   ub1 kcvcpetb[4]                          @516      0x00 
   ub1 kcvcpetb[5]                          @517      0x00 
   ub1 kcvcpetb[6]                          @518      0x00 
   ub1 kcvcpetb[7]                          @519      0x00 
查看正常数据文件头 
BBED> set count 26 
COUNT          26 
BBED> d offset 484 dba 3,1 
 File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_sysaux_d0xj0lhx_.dbf (3) 
 Block: 1                Offsets:  484 to  509           Dba:0x00c00001 
———————————————————————— 
 6dcf1d00 00000000 41a5d337 0100a792 2a000000 02000000 1000  

 <32 bytes per line> 

BBED> d offset 484 dba 4,1 
 File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_undotbs1_d0xj4qc1_.dbf (4) 
 Block: 1                Offsets:  484 to  509           Dba:0x01000001 
———————————————————————— 
 6dcf1d00 00000000 41a5d337 0100a792 2a000000 02000000 1000  

 查看system文件的数据文件头 

BBED> d offset 484 dba 1,1 
 File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1) 
 Block: 1                Offsets:  484 to  509           Dba:0x00400001 
———————————————————————— 
 e8c81d00 00000000 f5a2d337 01000000 15000000 02000000 1000  

 <32 bytes per line> 

修改system文件头 
BBED> modify /x 6dcf dba 1,1 offset 484 
Warning: contents of previous BIFILE will be lost. Proceed? (Y/N) y 
 File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1) 
 Block: 1                Offsets:  484 to  509           Dba:0x00400001 
———————————————————————— 
 6dcf1d00 00000000 f5a2d337 01000000 15000000 02000000 1000  

 <32 bytes per line> 

BBED> sum dba 1,1 apply 
Check value for File 1, Block 1: 
current = 0x2438, required = 0x2438 

BBED> d offset dba 1,1 
BBED-00207: invalid offset specifier (dba) 

BBED> d offset 484 dba 1,1 
 File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1) 
 Block: 1                Offsets:  484 to  509           Dba:0x00400001 
———————————————————————— 
 6dcf1d00 00000000 f5a2d337 01000000 15000000 02000000 1000  

 <32 bytes per line> 

打开数据库 
SQL> alter database open; 
alter database open 

ERROR at line 1: 
ORA-01113: file 1 needs media recovery 
ORA-01110: data file 1: ‘/data/oradata/ocrl/datafile/system01.dbf’ 

SQL> recover database; 
Media recovery complete. 
SQL> alter database open; 

Database altered. 

SQL> alter system switch logfile; 

System altered. 

SQL> / 

System altered.

Comments are closed.