测试环境
OS：redhat6.6
oracle:12.1.0.2
BBED(OracleBlockBrowerandEDitor Tool)，用来直接查看和修改数据文件数据的一个工具，是Oracle一款内部工具，可以直接修改Oracle数据文件块的内容，在一些极端恢复场景下比较有用。该工具不受Oracle支持，所以默认是没有生成可执行文件的，在使用前需要重新连接。
1.安装BBED
[oracle@12cdock software]$ cp bbedus.msb $ORACLE_HOME/rdbms/mesg
[oracle@12cdock software]$ cp sbbdpt.o $ORACLE_HOME/rdbms/lib
[oracle@12cdock software]$ cp ssbbded.o $ORACLE_HOME/rdbms/lib
[oracle@12cdock software]$ cd $ORACLE_HOME/rdbms/lib/
[oracle@12cdock lib]$ make -f ins_rdbms.mk $ORACLE_HOME/rdbms/lib/bbed
Linking BBED utility (bbed)
rm -f /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/bbed
/u01/app/oracle/product/12.1.0.2/db_1/bin/orald -o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/bbed -m64 -z noexecstack -Wl,
--disable-new-dtags -L/u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/ -L/u01/app/oracle/product/12.1.0.2/db_1/lib/ -L/u01/app/oracle/product/12.1.0.2/db_1/lib/stubs/
/u01/app/oracle/product/12.1.0.2/db_1/lib/s0main.o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/ssbbded.o /u01/app/oracle/product/12.1.0.2/db_1/rdbms/lib/sbbdpt.o
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -ldbtools12 -lclntsh -lclntshcore
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnro12
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnnz12 -lzt12 -lztkg12 -lztkg12 -lclient12 -lnnetd12 -lvsn12 -lcommon12 -lgeneric12 -lmm -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lnro12
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/ldflags` -lncrypt12 -lnsgr12 -lnzjs12 -ln12 -lnl12 -lclient12 -lnnetd12 -lvsn12 -lcommon12 -lgeneric12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12 -lclient12 -lnnetd12 -lvsn12 -lcommon12 -lgeneric12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lcore12 -lsnls12 -lnls12 -lxml12 -lcore12 -lunls12 -lsnls12 -lnls12 -lcore12 -lnls12
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/sysliblist` -Wl,-rpath,/u01/app/oracle/product/12.1.0.2/db_1/lib -lm
`cat /u01/app/oracle/product/12.1.0.2/db_1/lib/sysliblist` -ldl -lm -L/u01/app/oracle/product/12.1.0.2/db_1/lib
[oracle@12cdock lib]$ cp bbed /u01/app/oracle/product/12.1.0.2/db_1/bin/
BBED是Oracle 内部使用的命令，所以Oracle 不提供技术支持。 为了安全BBED设置了口令保护，默认密码为blockedit。
[oracle@12cdock lib]$ bbed
Password:
BBED: Release 2.0.0.0.0 - Limited Production on Wed Feb 22 09:47:07 2017
Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.
************* !!! For Oracle Internal Use only !!! ***************
BBED> show
FILE#
0
BLOCK#
1
OFFSET
0
DBA
0x00000000 (0 0,1)
FILENAME
BIFILE
bifile.bbd
LISTFILE
BLOCKSIZE
8192
MODE
Browse
EDIT
Unrecoverable
IBASE
Dec
OBASE
Dec
WIDTH
80
COUNT
512
LOGFILE
log.bbd
SPOOL
No
将现有数据文件在bbed中指定，没有的话先在sqlplus中创建
BBED> set filename '/u01/app/oracle/oradata/ORCL/datafile/test.dbf'
FILENAME
/u01/app/oracle/oradata/ORCL/datafile/test.dbf
BBED> show all;
FILE#
0
BLOCK#
1
OFFSET
0
DBA
0x00000000 (0 0,1)
FILENAME
/u01/app/oracle/oradata/ORCL/datafile/test.dbf
BIFILE
bifile.bbd
LISTFILE
BLOCKSIZE
8192
MODE
Browse
EDIT
Unrecoverable
IBASE
Dec
OBASE
Dec
WIDTH
80
COUNT
512
LOGFILE
log.bbd
SPOOL
No
2.使用参数文件连接BBED
a）查询出当前的数据文件并保存在文本文件中
SQL>spool psdb_file.txt
SQL> select file#||' '||name||' '||bytes from v$datafile ;
FILE#||''||NAME||''||BYTES
--------------------------------------------------------------------------------
1 /data/oradata/ocrl/datafile/system01.dbf 912261120
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480
4 /data/oradata/ocrl/datafile/users01.dbf 28835840
5 /data/oradata/ocrl/datafile/test.dbf 10485760
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760
6 rows selected.
SQL> spool off
注意：保存在文件里的文件号要与我们数据库查询出来的FILE#相同
ocrl:/home/oracle@oracle1>cat psdb_file.txt
1 /data/oradata/ocrl/datafile/system01.dbf 912261120
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480
4 /data/oradata/ocrl/datafile/users01.dbf 28835840
5 /data/oradata/ocrl/datafile/test.dbf 10485760
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760
b）BBED使用参数文件登陆
[oracle@12cdock ~]$cat psdb_file.txt
1 /data/oradata/ocrl/datafile/system01.dbf 912261120
2 /data/oradata/ocrl/datafile/sysaux01.dbf 1247805440
3 /data/oradata/ocrl/datafile/undotbs01.dbf 765460480
4 /data/oradata/ocrl/datafile/users01.dbf 28835840
5 /data/oradata/ocrl/datafile/test.dbf 10485760
6 /data/oradata/ocrl/datafile/tstest.dbf 10485760
[oracle@12cdock ~]$cat bbed_parameter.txt
blocksize=8192
listfile=/home/oracle/psdb_file.txt
mode=edit
ocrl:/home/oracle@oracle1>bbed parfile=/home/oracle/bbed_parameter.txt
Password:
BBED: Release 2.0.0.0.0 - Limited Production on Tue Feb 21 15:17:57 2017
Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.
************* !!! For Oracle Internal Use only !!! ***************
BBED> info
File# Name Size(blks)
----- ---- ----------
1 /data/oradata/ocrl/datafile/system01.dbf 111360
2 /data/oradata/ocrl/datafile/sysaux01.dbf 152320
3 /data/oradata/ocrl/datafile/undotbs01.dbf 93440
4 /data/oradata/ocrl/datafile/users01.dbf 3520
5 /data/oradata/ocrl/datafile/test.dbf 1280
6 /data/oradata/ocrl/datafile/tstest.dbf 1280
BBED>
3.破坏system表空间文件
注意：这里最好先做好备份
ocrl:/data/oradata/ocrl/datafile@oracle1>cp system01.dbf system01.dbf.bak
切换日志模拟生产交易，更新SCN
SQL> alter system switch logfile;//多切几次
System altered.
SQL> /
System altered.
SQL> /
System altered.
SQL> /
System altered.
SQL> /
System altered.
SQL> /
System altered.
SQL>
把旧的system文件直接复制替换掉新的
ocrl:/data/oradata/ocrl/datafile@oracle1>cp system01.dbf.bak system01.dbf
再次切换日志模拟生产交易
SQL> alter system switch logfile;
System altered.
SQL> /
System altered.
SQL> /
/
alter system switch logfile
*
ERROR at line 1:
ORA-03113: end-of-file on communication channel
Process ID: 9115
Session ID: 20 Serial number: 33669
出现问题，数据库直接宕掉
ocrl:/home/oracle@oracle1>sqlplus / as sysdba
SQL*Plus: Release 12.1.0.2.0 Production on Tue Feb 21 14:53:47 2017
Copyright (c) 1982, 2014, Oracle. All rights reserved.
Connected to an idle instance.
SQL> startup
ORACLE instance started.
Total System Global Area 754974720 bytes
Fixed Size
2928968 bytes
Variable Size
524291768 bytes
Database Buffers
222298112 bytes
Redo Buffers
5455872 bytes
Database mounted.
ORA-01113: file 1 needs media recovery
ORA-01110: data file 1: '/data/oradata/ocrl/datafile/system01.dbf'
SQL> col name for a50
SQL> select name,checkpoint_change# from v$datafile;
NAME
CHECKPOINT_CHANGE#
-------------------------------------------------- ------------------
/data/oradata/ocrl/datafile/system01.dbf
12717804
/data/oradata/ocrl/datafile/sysaux01.dbf
12717804
/data/oradata/ocrl/datafile/undotbs01.dbf
12717804
/data/oradata/ocrl/datafile/users01.dbf
12717804
/data/oradata/ocrl/datafile/test.dbf
12717804
/data/oradata/ocrl/datafile/tstest.dbf
12717804
6 rows selected.
scn 转换成16进制
SQL> select to_char(12717804,'xxxxxxxx') from dual;
TO_CHAR(1
---------
c20eec
SQL> select name,checkpoint_change# from v$datafile_header;
NAME
CHECKPOINT_CHANGE#
-------------------------------------------------- ------------------
/data/oradata/ocrl/datafile/system01.dbf
12717402
/data/oradata/ocrl/datafile/sysaux01.dbf
12717804
/data/oradata/ocrl/datafile/undotbs01.dbf
12717804
/data/oradata/ocrl/datafile/users01.dbf
12717804
/data/oradata/ocrl/datafile/test.dbf
12717804
/data/oradata/ocrl/datafile/tstest.dbf
12717804
6 rows selected.
可以看到数据库system01.dbf的scn点为12717402明显是用的备份的数据文件。oracle在open数据库时要对控制文件，数据文件头的scn进行检查，一致才能打开，所以这里我们通过ddeb来修改数据文件头让它和其他的数据文件的scn相同，达到起库的目的。
登陆bbed
ocrl:/home/oracle@oracle1>bbed parfile=bbed_parameter.txt
Password:
BBED: Release 2.0.0.0.0 - Limited Production on Tue Feb 21 14:58:25 2017
Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.
************* !!! For Oracle Internal Use only !!! ***************
用bbed查询bbed01数据文件结构信息
BBED> set dba 1,1
DBA
0x00400001 (4194305 1,1)
Bbed查看kcvfh信息
BBED> p kcvfhckp
struct kcvfhckp, 36 bytes @484
struct kcvcpscn, 8 bytes @484
ub4 kscnbas @484 0x00c20d5a
ub2 kscnwrp @488 0x0000
ub4 kcvcptim @492 0x37d28348
ub2 kcvcpthr @496 0x0001
union u, 12 bytes @500
struct kcvcprba, 12 bytes @500
ub4 kcrbaseq @500 0x000000bb
ub4 kcrbabno @504 0x00000002
ub2 kcrbabof @508 0x0010
ub1 kcvcpetb[0] @512 0x02
ub1 kcvcpetb[1] @513 0x00
ub1 kcvcpetb[2] @514 0x00
ub1 kcvcpetb[3] @515 0x00
ub1 kcvcpetb[4] @516 0x00
ub1 kcvcpetb[5] @517 0x00
ub1 kcvcpetb[6] @518 0x00
ub1 kcvcpetb[7] @519 0x00
BBED> set filename '/data/oradata/ocrl/datafile/system01.dbf'
FILENAME
/data/oradata/ocrl/datafile/system01.dbf
BBED> p kcvfhckp
struct kcvfhckp, 36 bytes @484
struct kcvcpscn, 8 bytes @484
ub4 kscnbas @484 0x00c20d5a
ub2 kscnwrp @488 0x0000
ub4 kcvcptim @492 0x37d28348
ub2 kcvcpthr @496 0x0001
union u, 12 bytes @500
struct kcvcprba, 12 bytes @500
ub4 kcrbaseq @500 0x000000bb
ub4 kcrbabno @504 0x00000002
ub2 kcrbabof @508 0x0010
ub1 kcvcpetb[0] @512 0x02
ub1 kcvcpetb[1] @513 0x00
ub1 kcvcpetb[2] @514 0x00
ub1 kcvcpetb[3] @515 0x00
ub1 kcvcpetb[4] @516 0x00
ub1 kcvcpetb[5] @517 0x00
ub1 kcvcpetb[6] @518 0x00
ub1 kcvcpetb[7] @519 0x00
查看正常数据文件头
BBED> set count 26
COUNT
26
BBED> d offset 484 dba 3,1
File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_sysaux_d0xj0lhx_.dbf (3)
Block: 1 Offsets: 484 to 509 Dba:0x00c00001
------------------------------------------------------------------------
6dcf1d00 00000000 41a5d337 0100a792 2a000000 02000000 1000
<32 bytes per line>
BBED> d offset 484 dba 4,1
File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_undotbs1_d0xj4qc1_.dbf (4)
Block: 1 Offsets: 484 to 509 Dba:0x01000001
------------------------------------------------------------------------
6dcf1d00 00000000 41a5d337 0100a792 2a000000 02000000 1000
查看system文件的数据文件头
BBED> d offset 484 dba 1,1
File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1)
Block: 1 Offsets: 484 to 509 Dba:0x00400001
------------------------------------------------------------------------
e8c81d00 00000000 f5a2d337 01000000 15000000 02000000 1000
<32 bytes per line>
修改system文件头
BBED> modify /x 6dcf dba 1,1 offset 484
Warning: contents of previous BIFILE will be lost. Proceed? (Y/N) y
File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1)
Block: 1 Offsets: 484 to 509 Dba:0x00400001
------------------------------------------------------------------------
6dcf1d00 00000000 f5a2d337 01000000 15000000 02000000 1000
<32 bytes per line>
BBED> sum dba 1,1 apply
Check value for File 1, Block 1:
current = 0x2438, required = 0x2438
BBED> d offset dba 1,1
BBED-00207: invalid offset specifier (dba)
BBED> d offset 484 dba 1,1
File: /u01/app/oracle/oradata/ORCL/datafile/o1_mf_system_d0xj2b4p_.dbf (1)
Block: 1 Offsets: 484 to 509 Dba:0x00400001
------------------------------------------------------------------------
6dcf1d00 00000000 f5a2d337 01000000 15000000 02000000 1000
<32 bytes per line>
打开数据库
SQL> alter database open;
alter database open
*
ERROR at line 1:
ORA-01113: file 1 needs media recovery
ORA-01110: data file 1: '/data/oradata/ocrl/datafile/system01.dbf'
SQL> recover database;
Media recovery complete.
SQL> alter database open;
Database altered.
SQL> alter system switch logfile;
System altered.
SQL> /
System altered.