ITPub博客

首页 > IT基础架构 > 网络安全 > LogMiner

LogMiner

原创 网络安全 作者:jinava 时间:2005-01-05 17:54:38 0 删除 编辑
$ORACLE_HOME/rdbms/admin/dbmslogmnrd.sql
$ORACLE_HOME/rdbms/admin/dbmslogmnr.sql
$ORACLE_HOME/rdbms/admin/prvtlogmnr.plb

Oracle 8.1.6
$ORACLE_HOME/rdbms/admin/dbmslmd.sql
$ORACLE_HOME/rdbms/admin/dbmslm.sql
$ORACLE_HOME/rdbms/admin/prvtlm.plb


sys:
exec dbms_logmnr_d.build(dictionary_filename => 'dictionary.ora', dictionary_location => '/data/oracle/logmnr');
exec dbms_logmnr.add_logfile(logfilename => '/data/oracle/archive/archiving_1_000026.dbf', options => dbms_logmnr.new);
exec dbms_logmnr.add_logfile(logfilename => '/data/oracle/archive/archiving_1_000027.dbf', options => dbms_logmnr.addfile);
------> v$logmnr_logs x$logmnr_logs
------> new, addfile, removefile
exec dbms_logmnr.start_logmnr(dictfilename => '/data/oracle/logmnr/dictionary.ora');
exec dbms_logmnr.start_logmnr(dictfilename => '/data/oracle/logmnr/dictionary.ora', starttime => to_date('2005-01-19 08:00:00', 'yyyy-mm-dd hh24:mi:ss'), endtime =>to_date( '2005-01-19 18:00:00', 'yyyy-mm-dd hh24:mi:ss'));
------> startscn, endscn
exec dbms_logmnr.start_logmnr(dictfilename=>'/data/oracle/logmnr/dictionary.ora',StartScn=>615909199,EndScn=>615909999);

exec dbms_logmnr.end_logmnr;

sql_redo: keep the new value: insert, delete
sql_undo: keep the old value: update
operation: commit, insert, delete, upate, start,internal ...

alter system switch logfile;

v$logmnr_dictionary
v$logmnr_parameters
v$logmnr_logs
v$logmnr_contents

SQL> desc v$logmnr_contents;
Name Null? Type
----------------------------------------- -------- ----------------------------
SCN NUMBER
CSCN NUMBER
TIMESTAMP DATE
COMMIT_TIMESTAMP DATE
THREAD# NUMBER
LOG_ID NUMBER
XIDUSN NUMBER
XIDSLT NUMBER
XIDSQN NUMBER
PXIDUSN NUMBER
PXIDSLT NUMBER
PXIDSQN NUMBER
RBASQN NUMBER
RBABLK NUMBER
RBABYTE NUMBER
UBAFIL NUMBER
UBABLK NUMBER
UBAREC NUMBER
UBASQN NUMBER
ABS_FILE# NUMBER
REL_FILE# NUMBER
DATA_BLK# NUMBER
DATA_OBJ# NUMBER
DATA_OBJD# NUMBER
SEG_OWNER VARCHAR2(32)
SEG_NAME VARCHAR2(256)
SEG_TYPE NUMBER
SEG_TYPE_NAME VARCHAR2(32)
TABLE_SPACE VARCHAR2(32)
ROW_ID VARCHAR2(19)
SESSION# NUMBER
SERIAL# NUMBER
USERNAME VARCHAR2(30)
SESSION_INFO VARCHAR2(4000)
TX_NAME VARCHAR2(256)
ROLLBACK NUMBER
OPERATION VARCHAR2(32)
OPERATION_CODE NUMBER
SQL_REDO VARCHAR2(4000)
SQL_UNDO VARCHAR2(4000)
RS_ID VARCHAR2(32)
SEQUENCE# NUMBER
SSN NUMBER
CSF NUMBER
INFO VARCHAR2(32)
STATUS NUMBER
REDO_VALUE RAW(8)
UNDO_VALUE RAW(8)
SQL_COLUMN_TYPE VARCHAR2(32)
SQL_COLUMN_NAME VARCHAR2(32)
REDO_LENGTH NUMBER
REDO_OFFSET NUMBER
UNDO_LENGTH NUMBER
UNDO_OFFSET NUMBER

[@more@]

来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/205087/viewspace-786752/,如需转载,请注明出处,否则将追究法律责任。

上一篇: utl_file_dir
请登录后发表评论 登录
全部评论
  • 博文量
    32
  • 访问量
    40608