标签云
asm恢复 bbed bootstrap$ dul In Memory kcbzib_kcrsds_1 kccpb_sanity_check_2 MySQL恢复 ORA-00312 ORA-00607 ORA-00704 ORA-00742 ORA-01110 ORA-01555 ORA-01578 ORA-08103 ORA-600 2131 ORA-600 2662 ORA-600 2663 ORA-600 3020 ORA-600 4000 ORA-600 4137 ORA-600 4193 ORA-600 4194 ORA-600 16703 ORA-600 kcbzib_kcrsds_1 ORA-600 KCLCHKBLK_4 ORA-15042 ORA-15196 ORACLE 12C oracle dul ORACLE PATCH Oracle Recovery Tools oracle加密恢复 oracle勒索 oracle勒索恢复 oracle异常恢复 ORACLE恢复 Oracle 恢复 ORACLE数据库恢复 oracle 比特币 OSD-04016 YOUR FILES ARE ENCRYPTED 勒索恢复 比特币加密文章分类
- Others (2)
- 中间件 (2)
- WebLogic (2)
- 操作系统 (102)
- 数据库 (1,700)
- DB2 (22)
- MySQL (74)
- Oracle (1,561)
- Data Guard (52)
- EXADATA (8)
- GoldenGate (24)
- ORA-xxxxx (159)
- ORACLE 12C (72)
- ORACLE 18C (6)
- ORACLE 19C (15)
- ORACLE 21C (3)
- Oracle 23ai (8)
- Oracle ASM (68)
- Oracle Bug (8)
- Oracle RAC (53)
- Oracle 安全 (6)
- Oracle 开发 (28)
- Oracle 监听 (28)
- Oracle备份恢复 (571)
- Oracle安装升级 (94)
- Oracle性能优化 (62)
- 专题索引 (5)
- 勒索恢复 (81)
- PostgreSQL (18)
- PostgreSQL恢复 (6)
- SQL Server (27)
- SQL Server恢复 (8)
- TimesTen (7)
- 达梦数据库 (2)
- 生活娱乐 (2)
- 至理名言 (11)
- 虚拟化 (2)
- VMware (2)
- 软件开发 (37)
- Asp.Net (9)
- JavaScript (12)
- PHP (2)
- 小工具 (20)
-
最近发表
- Oracle 19c 202501补丁(RUs+OJVM)
- 避免 19c 数据库性能问题需要考虑的事项 (Doc ID 3050476.1)
- Bug 21915719 Database hang or may fail to OPEN in 12c IBM AIX or HPUX Itanium – ORA-742, DEADLOCK or ORA-600 [kcrfrgv_nextlwn_scn] ORA-600 [krr_process_read_error_2]
- ORA-600 ktuPopDictI_1恢复
- impdp导入数据丢失sys授权问题分析
- impdp 创建index提示ORA-00942: table or view does not exist
- 数据泵导出 (expdp) 和导入 (impdp)工具性能降低分析参考
- 19c非归档数据库断电导致ORA-00742故障恢复
- Oracle 19c – 手动升级到 Non-CDB Oracle Database 19c 的完整核对清单
- sqlite数据库简单操作
- Oracle 暂定和恢复功能
- .pzpq扩展名勒索恢复
- Oracle read only用户—23ai新特性:只读用户
- 迁移awr快照数据到自定义表空间
- .hmallox加密mariadb/mysql数据库恢复
- 2025年首个故障恢复—ORA-600 kcbzib_kcrsds_1
- 第一例Oracle 21c恢复咨询
- ORA-15411: Failure groups in disk group DATA have different number of disks.
- 断电引起的ORA-08102: 未找到索引关键字, 对象号 39故障处理
- ORA-00227: corrupt block detected in control file
分类目录归档:Oracle
迁移awr快照数据到自定义表空间
在19c中有些情况,考虑把awr的快照数据存储在非sysaux表空间,可以通过DBMS_WORKLOAD_REPOSITORY.MODIFY_SNAPSHOT_SETTINGS来进行设置
sys@ORA19C 21:57:02> select BANNER_FULL from v$version; BANNER_FULL ---------------------------------------------------------------------------------------------- Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.24.0.0.0 Elapsed: 00:00:00.01 PROCEDURE MODIFY_SNAPSHOT_SETTINGS Argument Name Type In/Out Default? ------------------------------ ----------------------- ------ -------- RETENTION NUMBER IN DEFAULT INTERVAL NUMBER IN DEFAULT TOPNSQL NUMBER IN DEFAULT DBID NUMBER IN DEFAULT TABLESPACE_NAME VARCHAR2 IN DEFAULT PROCEDURE MODIFY_SNAPSHOT_SETTINGS Argument Name Type In/Out Default? ------------------------------ ----------------------- ------ -------- RETENTION NUMBER IN DEFAULT INTERVAL NUMBER IN DEFAULT TOPNSQL VARCHAR2 IN DBID NUMBER IN DEFAULT TABLESPACE_NAME VARCHAR2 IN DEFAULT
这两个proc,主要是TOPNSQL一个是number类型,一个是varchar2类型
If NUMBER: Top N SQL size. The number of Top SQL to flush for each SQL criteria (Elapsed Time, CPU Time, Parse Calls, Shareable Memory, Version Count). The value for this setting will not be affected by the statistics/flush level and will override the system default behavior for the AWR SQL collection. The setting will have a minimum value of 30 and a maximum value of 50,000. Specifying NULL will keep the current setting.
If VARCHAR2: Users are allowed to specify the following values: (DEFAULT, MAXIMUM, N), where N is the number of Top SQL to flush for each SQL criteria. Specifying DEFAULT will revert the system back to the default behavior of Top 30 for statistics level TYPICAL and Top 100 for statistics level ALL. Specifying MAXIMUM will cause the system to capture the complete set of SQL in the cursor cache. Specifying the number N is equivalent to setting the Top N SQL with the NUMBER type. Specifying NULL for this argument will keep the current setting.
进行了简单的测试,确认是部分awr的分区表设置到新表空间中
sys@ORA19C 21:41:51> CREATE TABLESPACE AWRTBS DATAFILE '/data/oradata/ORA19C/awrtbs01.dbf' size 128M autoextend on; Tablespace created. Elapsed: 00:00:00.53 sys@ORA19C 21:42:21> exec dbms_workload_repository.modify_snapshot_settings(tablespace_name=> 'AWRTBS'); PL/SQL procedure successfully completed. Elapsed: 00:00:01.53 sys@ORA19C 21:53:56> execute dbms_workload_repository.create_snapshot(); PL/SQL procedure successfully completed. Elapsed: 00:00:01.44 sys@ORA19C 21:53:58> select segment_name,PARTITION_NAME,segment_type from dba_segments where tablespace_name='AWRTBS'; SEGMENT_NAME PARTITION_NAME SEGMENT_TYPE ------------------------------ ------------------------------------------------------------ --------------- WRH$_FILESTATXS WRH$_FILESTATXS_1232450071_2690 TABLE PARTITION WRH$_SQLSTAT WRH$_SQLSTAT_1232450071_2690 TABLE PARTITION WRH$_SYSTEM_EVENT WRH$_SYSTEM_EVENT_1232450071_2690 TABLE PARTITION WRH$_WAITSTAT WRH$_WAITSTAT_1232450071_2690 TABLE PARTITION WRH$_LATCH WRH$_LATCH_1232450071_2690 TABLE PARTITION WRH$_LATCH_MISSES_SUMMARY WRH$_LATCH_MISSES_SUMMARY_1232450071_2690 TABLE PARTITION WRH$_DB_CACHE_ADVICE WRH$_DB_CACHE_ADVICE_1232450071_2690 TABLE PARTITION WRH$_ROWCACHE_SUMMARY WRH$_ROWCACHE_SUMMARY_1232450071_2690 TABLE PARTITION WRH$_SGASTAT WRH$_SGASTAT_1232450071_2690 TABLE PARTITION WRH$_SYSSTAT WRH$_SYSSTAT_1232450071_2690 TABLE PARTITION WRH$_PARAMETER WRH$_PARAMETER_1232450071_2690 TABLE PARTITION WRH$_SEG_STAT WRH$_SEG_STAT_1232450071_2690 TABLE PARTITION WRH$_SERVICE_STAT WRH$_SERVICE_STAT_1232450071_2690 TABLE PARTITION WRH$_ACTIVE_SESSION_HISTORY WRH$_ACTIVE_SESSION_HISTORY_1232450071_2690 TABLE PARTITION WRH$_SYSMETRIC_HISTORY WRH$_SYSMETRIC_HISTORY_1232450071_2690 TABLE PARTITION WRH$_LATCH_CHILDREN WRH$_LATCH_CHILDREN_1232450071_0 TABLE PARTITION WRH$_LATCH_PARENT WRH$_LATCH_PARENT_1232450071_0 TABLE PARTITION WRH$_DLM_MISC WRH$_DLM_MISC_1232450071_0 TABLE PARTITION WRH$_INST_CACHE_TRANSFER WRH$_INST_CACHE_TRANSFER_1232450071_0 TABLE PARTITION WRH$_INTERCONNECT_PINGS WRH$_INTERCONNECT_PINGS_1232450071_0 TABLE PARTITION WRH$_TABLESPACE_STAT WRH$_TABLESPACE_STAT_1232450071_2690 TABLE PARTITION WRH$_OSSTAT WRH$_OSSTAT_1232450071_2690 TABLE PARTITION WRH$_SYS_TIME_MODEL WRH$_SYS_TIME_MODEL_1232450071_2690 TABLE PARTITION WRH$_SERVICE_WAIT_CLASS WRH$_SERVICE_WAIT_CLASS_1232450071_2690 TABLE PARTITION WRH$_EVENT_HISTOGRAM WRH$_EVENT_HISTOGRAM_1232450071_2690 TABLE PARTITION WRH$_MVPARAMETER WRH$_MVPARAMETER_1232450071_2690 TABLE PARTITION WRH$_CELL_GLOBAL_SUMMARY WRH$_CELL_GLOBAL_SUMMARY_1232450071_2690 TABLE PARTITION WRH$_CELL_DISK_SUMMARY WRH$_CELL_DISK_SUMMARY_1232450071_2690 TABLE PARTITION WRH$_CELL_GLOBAL WRH$_CELL_GLOBAL_1232450071_2690 TABLE PARTITION WRH$_CELL_IOREASON WRH$_CELL_IOREASON_1232450071_2690 TABLE PARTITION WRH$_CELL_DB WRH$_CELL_DB_1232450071_2690 TABLE PARTITION WRH$_CELL_OPEN_ALERTS WRH$_CELL_OPEN_ALERTS_1232450071_2690 TABLE PARTITION WRH$_IM_SEG_STAT WRH$_IM_SEG_STAT_1232450071_2690 TABLE PARTITION WRM$_PDB_IN_SNAP WRM$_PDB_IN_SNAP_1232450071_2690 TABLE PARTITION WRH$_CON_SYSMETRIC_HISTORY WRH$_CON_SYSMETRIC_HISTORY_1232450071_2690 TABLE PARTITION WRM$_ACTIVE_PDBS WRM$_ACTIVE_PDBS_1232450071_2690 TABLE PARTITION WRH$_CON_SYSSTAT WRH$_CON_SYSSTAT_1232450071_2690 TABLE PARTITION WRH$_CON_SYSTEM_EVENT WRH$_CON_SYSTEM_EVENT_1232450071_2690 TABLE PARTITION WRH$_PROCESS_WAITTIME WRH$_PROCESS_WAITTIME_1232450071_2690 TABLE PARTITION WRH$_ASM_DISK_STAT_SUMMARY WRH$_ASM_DISK_STAT_SUMMARY_1232450071_2690 TABLE PARTITION WRH$_AWR_TEST_1 WRH$_AWR_TEST_1_1232450071_2690 TABLE PARTITION WRH$_SESS_NETWORK WRH$_SESS_NETWORK_1232450071_2690 TABLE PARTITION WRH$_CON_SYS_TIME_MODEL WRH$_CON_SYS_TIME_MODEL_1232450071_2690 TABLE PARTITION 43 rows selected. Elapsed: 00:00:00.01 sys@ORA19C 21:54:08>
.hmallox加密mariadb/mysql数据库恢复
有客户运行在win机器上的mariadb数据库被勒索加密了,加密扩展名为.hmallox
HOW TO BACK FILES.txt文件内容
Hello Your data has been stolen and encrypted We will delete the stolen data and help with the recovery of encrypted files after payment has been made Do not try to change or restore files yourself, this will break them We provide free decryption for any 3 files up to 3MB in size on our website How to contact with us: 1) Download and install TOR browser by this link: https://www.torproject.org/download/ 2) If TOR blocked in your country and you can't access to the link then use any VPN software 3) Run TOR browser and open the site: wtyafjyxxxxxxxxxxxxxxxxxxxxxxxxljoyuklaad.onion/mallox/privateSignin 4) Copy your private ID in the input field. Your Private key: D7xxxxxxxxxxxxxxx90 5) You will see chat, payment information and we can make free test decryption here Our blog of leaked companies: wtyafjyxxxxxxxxxxxxxxxxxxxxxxxxljoyuklaad.onion If you are unable to contact us through the site, then you can email us: mallox.resurrection@onionmail.org Waiting for a response via mail can be several days. Do not use it if you have not tried contacting through the site.
通过分析,ibd文件情况尚可
对于这种情况,对于ibd文件进行分析结合客户提供的字典信息,完美恢复数据,业务直接使用
2025年首个故障恢复—ORA-600 kcbzib_kcrsds_1
一个12.2.0.1的库由于某种原因引起的双机切换,导致数据库无法正常mount
2025-01-04T15:45:44.424193+08:00 alter database mount 2025-01-04T15:45:48.491054+08:00 Network throttle feature is disabled as mount time 2025-01-04T15:45:48.601366+08:00 LGWR (ospid: 34014): terminating the instance 2025-01-04T15:45:48.602480+08:00 System state dump requested by (instance=1, osid=34014 (LGWR)), summary=[abnormal instance termination]. System State dumped to trace file /u01/app/oracle/diag/rdbms/xifenfei/trace/xifenfei_diag_33978_20250104154548.trc 2025-01-04T15:45:48.790674+08:00 Dumping diagnostic data in directory=[cdmp_20250104154548], requested by (instance=1, osid=34014 (LGWR)) 2025-01-04T15:45:49.915068+08:00 Instance terminated by LGWR, pid = 34014
这个错误相对比较明显,是由于ctl异常导致,通过重建ctl,然后mount库,利用Oracle数据库异常恢复检查脚本(Oracle Database Recovery Check)脚本进行检测发现所有数据文件头的checkpoint 信息被冻结在 2024-11-29 19:00:29 (scn 2112302221)
分析alert日志数据库在此后20天中正常提供服务,业务运行都正常,客户反馈在这个冻结checkpoint信息的时间点,使用备份一体机发起过备份,之后就没有再备份了.
当时急着恢复数据库,没有对文件头进行dump不然应该可以发现类似begin backup的信息,类似这样(测试环境重现):
DATA FILE #1: name #7: /u01/app/oracle/oradata/xifenfei/system01.dbf creation size=0 block size=8192 status=0xe head=7 tail=7 dup=1 tablespace 0, index=1 krfil=1 prev_file=0 unrecoverable scn: 0x0000.00000000 01/01/1988 00:00:00 Checkpoint cnt:625 scn: 0x0105.0106deef 01/04/2025 22:02:50 Stop scn: 0xffff.ffffffff 12/14/2024 08:15:07 Creation Checkpointed at scn: 0x0000.00000007 08/24/2013 11:37:33 thread:0 rba:(0x0.0.0) enabled threads: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Offline scn: 0x0000.000e2005 prev_range: 0 Online Checkpointed at scn: 0x0000.000e2006 03/20/2024 20:53:56 thread:1 rba:(0x1.2.0) enabled threads: 01000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Hot Backup end marker scn: 0x0000.00000000 aux_file is NOT DEFINED Plugged readony: NO Plugin scnscn: 0x0000.00000000 Plugin resetlogs scn/timescn: 0x0000.00000000 01/01/1988 00:00:00 Foreign creation scn/timescn: 0x0000.00000000 01/01/1988 00:00:00 Foreign checkpoint scn/timescn: 0x0000.00000000 01/01/1988 00:00:00 Online move state: 0 V10 STYLE FILE HEADER: Compatibility Vsn = 186647552=0xb200400 Db ID=1780931490=0x6a26dba2, Db Name='XIFENFEI' Activation ID=0=0x0 Control Seq=32953021=0x1f6d2bd, File size=98560=0x18100 File Number=1, Blksiz=8192, File Type=3 DATA Tablespace #0 - SYSTEM rel_fn:1 Creation at scn: 0x0000.00000007 08/24/2013 11:37:33 Backup taken at scn: 0x0105.0106deef 01/04/2025 22:02:50 thread:1 <====注意 reset logs count:0x45636764 scn: 0x0000.000e2006 prev reset logs count:0x3121c97a scn: 0x0000.00000001 recovered at 12/14/2024 08:36:35 status:0x2001 root dba:0x00400208 chkpt cnt: 625 ctl cnt:624 begin-hot-backup file size: 98560 <====注意 Checkpointed at scn: 0x0105.0106deef 01/04/2025 22:02:50 thread:1 rba:(0x205.fdd9.10) enabled threads: 01000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 Backup Checkpointed at scn: 0x0105.0106df14 01/04/2025 22:03:20 <====注意 thread:1 rba:(0x209.2.10) enabled threads: 01000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 External cache id: 0x0 0x0 0x0 0x0 Absolute fuzzy scn: 0x0000.00000000 Recovery fuzzy scn: 0x0000.00000000 01/01/1988 00:00:00 Terminal Recovery Stamp 01/01/1988 00:00:00 Platform Information: Creation Platform ID: 13 Current Platform ID: 13 Last Platform ID: 13
基于上述情况,尝试强制打开库,报ORA-00600: internal error code, arguments: [kcbzib_kcrsds_1]错误
对于这个情况,以前有过大量恢复案例,修改数据库scn即可
kcbzib_kcrsds_1报错汇总
12C数据库报ORA-600 kcbzib_kcrsds_1故障处理
存储故障,强制拉库报ORA-600 kcbzib_kcrsds_1处理
Patch SCN工具一键恢复ORA-600 kcbzib_kcrsds_1
此类故障处理太多,不一一列举,解决这个错误之后,数据库open成功,然后安排逻辑迁移即可