2010年2月25日星期四

dbms_job實驗

做statspack實驗的時候發現一個問題,就是設定dbms_job後,不自動進行刷新,記錄一下,備忘

在oracle的$ORACLE_HOME/rdbms/admin下有一個腳本spauto.sql看名字就知道是自動做statspack的。其中有一段腳本可以直接來用

--
--  Schedule a snapshot to be run on this instance every hour, on the hour
variable jobno number;
variable instno number;
begin
  select instance_number into :instno from v$instance;
  dbms_job.submit(:jobno, 'statspack.snap;', trunc(sysdate+1/24,'HH'), 'trunc(SYSDATE+1/24,''HH'')', TRUE, :instno);
  commit;
end;
/

創建一個user job

SQL>
SQL>
variable jobno number;
variable instno number;
begin
  select instance_number into :instno from v$instance;
  dbms_job.submit(:jobno, 'statspack.snap;', trunc(sysdate+1/24,'HH'), 'trunc(SYSDATE+1/24,''HH'')', TRUE, :instno);tno);
  commit;
  5  end;
  6  /
PL/SQL procedure successfully completed.
SQL>

SQL> select job, last_date, this_date, next_date from user_jobs;
       JOB LAST_DATE           THIS_DATE           NEXT_DATE
---------- ------------------- ------------------- -------------------
        21                                         2010-02-25 16:00:00
1 row selected.
SQL>

因為是實驗所以將間隔設定的為1min一次

SQL> exec dbms_job.interval(21, 'sysdate+1/(24*60)');
PL/SQL procedure successfully completed.
SQL>

SQL> commit;
Commit complete.

SQL> col interval for a30
SQL> select job, last_date, this_date, next_date , interval from user_jobs;
       JOB LAST_DATE           THIS_DATE           NEXT_DATE           INTERVAL
---------- ------------------- ------------------- ------------------- ------------------------------
        21                                         2010-02-25 16:00:00 sysdate+1/(24*60)
1 row selected.
SQL>

可以看到已經設置成功了。

但是等了1min發現沒有新的snap記錄

SQL> select count(*) from stats$snapshot;
  COUNT(*)
----------
         3
1 row selected.

感覺應該是next_date這個字段有影響

執行

SQL> exec dbms_job.next_date(21, to_date('20100225 15:45:01', 'yyyymmdd hh24:mi:ss'));
PL/SQL procedure successfully completed.
SQL> commit;
Commit complete.

 

SQL> select sysdate from dual;
SYSDATE
-------------------
2010-02-25 15:45:10
1 row selected.

 

SQL> select job, last_date, this_date, next_date , interval from user_jobs;
       JOB LAST_DATE           THIS_DATE           NEXT_DATE           INTERVAL
---------- ------------------- ------------------- ------------------- ------------------------------
        21 2010-02-25 15:45:05                     2010-02-25 15:46:05 sysdate+1/(24*60)
1 row selected.

注意已經發生變化了

SQL> select count(*) from stats$snapshot;
  COUNT(*)
----------
        4
1 row selected.

等1min左右

SQL> select count(*) from stats$snapshot;
  COUNT(*)
----------
        5
1 row selected.

記錄一下,備忘。

2010年2月22日星期一

openSolaris 0906 install GCC

1,像偉大的SUN默哀1 min

2,使用 open Solaris live CD 0906安裝一個測試環境。

運行gcc

root@opensolaris:~# gcc
-bash: gcc: command not found
root@opensolaris:~#

沒有找到gcc,安裝

圖形介面

System->Administration –> Package Manager

Search all package for “GCC” or “SUNWgcc”

Install /update packages

installation completed successfully

root@opensolaris:~# cd /usr/sfw/bin
root@opensolaris:/usr/sfw/bin# ls gcc
gcc
root@opensolaris:/usr/sfw/bin# ./gcc
gcc: no input files
root@opensolaris:/usr/sfw/bin# ./gcc -v
Reading specs from /usr/sfw/lib/gcc/i386-pc-solaris2.11/3.4.3/specs
Configured with: /builds2/sfwnv-111a/usr/src/cmd/gcc/gcc-3.4.3/configure --prefix=/usr/sfw --with-as=/usr/sfw/bin/gas --with-gnu-as --with-ld=/usr/ccs/bin/ld --without-gnu-ld --enable-languages=c,c++,f77,objc --enable-shared
Thread model: posix
gcc version 3.4.3 (csl-sol210-3_4-20050802)
root@opensolaris:/usr/sfw/bin#

記錄一下,備忘!

Oracle scn相關

如何查看Oracle當前的SCN呢?

SQL> select current_scn,scn_to_timestamp(current_scn) ,timestamp_to_scn(sysdate)
from v$database  ;

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                      T                                                                                                                               IMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------                                                                                                                               ------- -------------------------
    4170959 03-MAR-10 09.30.34.000000000 AM                                                                                                                                                                     4170958

SQL> l
  1  select current_scn,scn_to_timestamp(current_scn) ,timestamp_to_scn(sysdate)
  2* from v$database
SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4170969 03-MAR-10 09.31.01.000000000 AM                                                               4170968

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4170983 03-MAR-10 09.31.22.000000000 AM                                                               4170982

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4170986 03-MAR-10 09.31.28.000000000 AM                                                               4170985

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4170988 03-MAR-10 09.31.31.000000000 AM                                                               4170987

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4170991 03-MAR-10 09.31.37.000000000 AM                                                               4170990

 

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4171182 03-MAR-10 09.34.25.000000000 AM                                                               4171177

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
   4171184 03-MAR-10 09.34.31.000000000 AM                                                               4171184

SQL> /

CURRENT_SCN SCN_TO_TIMESTAMP(CURRENT_SCN)                                               TIMESTAMP_TO_SCN(SYSDATE)
----------- --------------------------------------------------------------------------- -------------------------
    4171187 03-MAR-10 09.34.34.000000000 AM                                                               4171186

current_scn與 convert以後的sysdate,不一定對應的。

繼續研究

Oracle archive log mode 相關

發現自己搭建的RAC環境(vmware +OEL linux 5 + oracle 11g),總是包空間不夠,想了一下,應該是archive log mode 因為不管它了,瘋漲log了

如何發現是archive log mode呢?

SQL> select log_mode from v$database;

LOG_MODE
------------
ARCHIVELOG

SQL>

archive log 放在那個地方呢?

show parameter archive

SQL> show parameter archive

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
archive_lag_target                   integer     0
log_archive_config                   string
log_archive_dest                     string
log_archive_dest_1                   string
log_archive_dest_10                  string
log_archive_dest_2                   string
log_archive_dest_3                   string
log_archive_dest_4                   string
log_archive_dest_5                   string
log_archive_dest_6                   string
log_archive_dest_7                   string

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
log_archive_dest_8                   string
log_archive_dest_9                   string
log_archive_dest_state_1             string      enable
log_archive_dest_state_10            string      enable
log_archive_dest_state_2             string      enable
log_archive_dest_state_3             string      enable
log_archive_dest_state_4             string      enable
log_archive_dest_state_5             string      enable
log_archive_dest_state_6             string      enable
log_archive_dest_state_7             string      enable
log_archive_dest_state_8             string      enable

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
log_archive_dest_state_9             string      enable
log_archive_duplex_dest              string
log_archive_format                   string      %t_%s_%r.dbf
log_archive_local_first              boolean     TRUE
log_archive_max_processes            integer     4
log_archive_min_succeed_dest         integer     1
log_archive_start                    boolean     FALSE
log_archive_trace                    integer     0
standby_archive_dest                 string      ?/dbs/arch
SQL>

沒有顯示出來,如何解決呢?

用v$archive_dest這個view

SQL> desc v$archive_dest;
Name                                      Null?    Type
----------------------------------------- -------- ----------------------------
DEST_ID                                            NUMBER
DEST_NAME                                          VARCHAR2(256)
STATUS                                             VARCHAR2(9)
BINDING                                            VARCHAR2(9)
NAME_SPACE                                         VARCHAR2(7)
TARGET                                             VARCHAR2(7)
ARCHIVER                                           VARCHAR2(10)
SCHEDULE                                           VARCHAR2(8)
DESTINATION                                        VARCHAR2(256)
LOG_SEQUENCE                                       NUMBER
REOPEN_SECS                                        NUMBER
DELAY_MINS                                         NUMBER
MAX_CONNECTIONS                                    NUMBER
NET_TIMEOUT                                        NUMBER
PROCESS                                            VARCHAR2(10)
REGISTER                                           VARCHAR2(3)
FAIL_DATE                                          DATE
FAIL_SEQUENCE                                      NUMBER
FAIL_BLOCK                                         NUMBER
FAILURE_COUNT                                      NUMBER
MAX_FAILURE                                        NUMBER
ERROR                                              VARCHAR2(256)
ALTERNATE                                          VARCHAR2(256)
DEPENDENCY                                         VARCHAR2(256)
REMOTE_TEMPLATE                                    VARCHAR2(256)
QUOTA_SIZE                                         NUMBER
QUOTA_USED                                         NUMBER
MOUNTID                                            NUMBER
TRANSMIT_MODE                                      VARCHAR2(12)
ASYNC_BLOCKS                                       NUMBER
AFFIRM                                             VARCHAR2(3)
TYPE                                               VARCHAR2(7)
VALID_NOW                                          VARCHAR2(16)
VALID_TYPE                                         VARCHAR2(15)
VALID_ROLE                                         VARCHAR2(12)
DB_UNIQUE_NAME                                     VARCHAR2(30)
VERIFY                                             VARCHAR2(3)
COMPRESSION                                        VARCHAR2(7)

 

SQL> col dest_name for a50
SQL> col destination for a50
SQL> select dest_name, status, destination from v$archive_dest;

DEST_NAME                                          STATUS    DESTINATION
-------------------------------------------------- --------- --------------------------------------------------
LOG_ARCHIVE_DEST_1                                 VALID     /u01/app/oracle/product/11.1.0/db_1/dbs/arch
LOG_ARCHIVE_DEST_2                                 INACTIVE
LOG_ARCHIVE_DEST_3                                 INACTIVE
LOG_ARCHIVE_DEST_4                                 INACTIVE
LOG_ARCHIVE_DEST_5                                 INACTIVE
LOG_ARCHIVE_DEST_6                                 INACTIVE
LOG_ARCHIVE_DEST_7                                 INACTIVE
LOG_ARCHIVE_DEST_8                                 INACTIVE
LOG_ARCHIVE_DEST_9                                 INACTIVE
LOG_ARCHIVE_DEST_10                                VALID     USE_DB_RECOVERY_FILE_DEST

10 rows selected.

SQL>

到相應的目錄下找到時間比較久遠的文件,delete,空間就釋放了,

因為我這裡是測試環境,所以沒有考慮那麼複雜

[oracle@croracle02 dbs]$ df -lh
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
                       18G  8.8G  7.8G  54% /
/dev/sda1              99M   12M   82M  13% /boot
tmpfs                1006M  667M  340M  67% /dev/shm
/dev/sdd1             2.0G  843M  1.2G  42% /u02

 

記錄一下,備忘

2010年2月19日星期五

expdp實驗

仰慕expdp,impdp很久,一直沒有動手做過,記錄一下expdp的實驗的內容:

[oracle@localhost ~]$ expdp scott/tiger DIRECTORY=dump_dir dumpfile=emp.dmp tables=emp
Export: Release 10.2.0.1.0 - 64bit Production on 星期六, 27 2月, 2010 7:12:40
Copyright (c) 2003, 2005, Oracle.  All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
ORA-39002: invalid operation
ORA-39070: Unable to open the log file.
ORA-39087: directory name DUMP_DIR is invalid

報錯了

[oracle@localhost ~]$ sqlplus scott/tiger
SQL*Plus: Release 10.2.0.1.0 - Production on 星期六 2月 27 07:18:57 2010
Copyright (c) 1982, 2005, Oracle.  All rights reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SQL> create directory dump_dir as '/u01';
create directory dump_dir as '/u01'
*
ERROR at line 1:
ORA-01031: insufficient privileges

SQL> conn / as sysdba;
Connected.
SQL> create directory dump_dir as '/u01/dump';
Directory created.
SQL> grant read, write on directory dump_dir to scott;
Grant succeeded.
SQL>

 

[oracle@localhost ~]$ expdp scott/tiger DIRECTORY=dump_dir dumpfile=emp.dmp tables=emp
Export: Release 10.2.0.1.0 - 64bit Production on 星期六, 27 2月, 2010 7:22:27
Copyright (c) 2003, 2005, Oracle.  All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
Starting "SCOTT"."SYS_EXPORT_TABLE_01":  scott/******** DIRECTORY=dump_dir dumpfile=emp.dmp tables=emp
Estimate in progress using BLOCKS method...
Processing object type TABLE_EXPORT/TABLE/TABLE_DATA
Total estimation using BLOCKS method: 64 KB
Processing object type TABLE_EXPORT/TABLE/TABLE
Processing object type TABLE_EXPORT/TABLE/INDEX/INDEX
Processing object type TABLE_EXPORT/TABLE/CONSTRAINT/CONSTRAINT
Processing object type TABLE_EXPORT/TABLE/INDEX/STATISTICS/INDEX_STATISTICS
Processing object type TABLE_EXPORT/TABLE/CONSTRAINT/REF_CONSTRAINT
Processing object type TABLE_EXPORT/TABLE/STATISTICS/TABLE_STATISTICS
. . exported "SCOTT"."EMP"                               7.820 KB      14 rows
Master table "SCOTT"."SYS_EXPORT_TABLE_01" successfully loaded/unloaded
******************************************************************************
Dump file set for SCOTT.SYS_EXPORT_TABLE_01 is:
  /u01/dump/emp.dmp
Job "SCOTT"."SYS_EXPORT_TABLE_01" successfully completed at 07:22:49
[oracle@localhost ~]$

 

[oracle@localhost dump]$ ls
emp.dmp  export.log
[oracle@localhost dump]$
[oracle@localhost dump]$ strings  emp.dmp |less
<CHARSET>WE8ISO8859P1</CHARSET>
//字符集

<NCHARSET
>AL16UTF16</NCHARSET>國家字符集

 

這個表的數據不大,體現不出來優勢,不過基本上跑過了,呵呵!

春節後的第一貼!

2010年1月31日星期日

opensolaris(solaris5.11)下如何mount ntfs 格式的usb disk?

opensolaris mount usb disk
################################################################
root@opensolaris:~/software# wget -c http://www.belenix.org/binfiles/FSWpart.tar.gz
--12:34:27--  http://www.belenix.org/binfiles/FSWpart.tar.gz
           => `FSWpart.tar.gz'
Resolving www.belenix.org... 204.152.191.108
Connecting to www.belenix.org|204.152.191.108|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 34,587 (34K) [application/x-gzip]
100%[====================================>] 34,587        41.66K/s
12:34:28 (41.58 KB/s) - `FSWpart.tar.gz' saved [34587/34587]
root@opensolaris:~/software# ls
FSWpart.tar.gz
root@opensolaris:~/software# gunzip -c FSWpart.tar.gz |tar xvf -
FSWpart/
FSWpart/pkgmap
FSWpart/pkginfo
FSWpart/install/
FSWpart/install/copyright
FSWpart/reloc/
FSWpart/reloc/usr/
FSWpart/reloc/usr/bin/
FSWpart/reloc/usr/bin/prtpart
FSWpart/reloc/usr/bin/prtpart.bin
FSWpart/reloc/usr/share/
FSWpart/reloc/usr/share/src/
FSWpart/reloc/usr/share/src/prtpart.c
root@opensolaris:~/software# ls
FSWpart  FSWpart.tar.gz
root@opensolaris:~/software# pkgadd -d . FSWpart
Processing package instance <FSWpart> from </root/software>
x86 Partition Table Dumper(i386) 0.1
#
# Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# Author Moinak Ghosh
#
Using </> as the package base directory.
## Processing package information.
## Processing system information.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.
Installing x86 Partition Table Dumper as <FSWpart>
## Installing part 1 of 1.
/usr/bin/prtpart
/usr/bin/prtpart.bin
/usr/share/src/prtpart.c
[ verifying class <none> ]
Installation of <FSWpart> was successful.
root@opensolaris:~/software#
root@opensolaris:~/software# wget -c http://www.belenix.org/binfiles/FSWfsmisc.tar.gz
--12:37:17--  http://www.belenix.org/binfiles/FSWfsmisc.tar.gz
           => `FSWfsmisc.tar.gz'
Resolving www.belenix.org... 204.152.191.108
Connecting to www.belenix.org|204.152.191.108|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4,286,525 (4.1M) [application/x-gzip]
100%[====================================>] 4,286,525     72.92K/s    ETA 00:00
12:38:03 (91.30 KB/s) - `FSWfsmisc.tar.gz' saved [4286525/4286525]
root@opensolaris:~/software#
root@opensolaris:~/software# gunzip -c FSWfsmisc.tar.gz  |tar xvf -
FSWfsmisc/
FSWfsmisc/pkgmap
FSWfsmisc/pkginfo
FSWfsmisc/install/
FSWfsmisc/install/copyright
FSWfsmisc/install/depend
FSWfsmisc/reloc/
FSWfsmisc/reloc/etc/
FSWfsmisc/reloc/etc/gnome-vfs-2.0/
FSWfsmisc/reloc/etc/gnome-vfs-2.0/modules/
FSWfsmisc/reloc/etc/gnome-vfs-2.0/modules/libntfs.conf
FSWfsmisc/reloc/usr/
FSWfsmisc/reloc/usr/bin/
FSWfsmisc/reloc/usr/bin/chattr
FSWfsmisc/reloc/usr/bin/lsattr
FSWfsmisc/reloc/usr/bin/ntfscat
FSWfsmisc/reloc/usr/bin/ntfscluster
FSWfsmisc/reloc/usr/bin/ntfscmp
FSWfsmisc/reloc/usr/bin/ntfsfix
FSWfsmisc/reloc/usr/bin/ntfsinfo
FSWfsmisc/reloc/usr/bin/ntfsls
FSWfsmisc/reloc/usr/bin/uuidgen
FSWfsmisc/reloc/usr/bin/xlsmounts
FSWfsmisc/reloc/usr/bin/xumount
FSWfsmisc/reloc/usr/include/
FSWfsmisc/reloc/usr/include/et/
FSWfsmisc/reloc/usr/include/et/com_err.h
FSWfsmisc/reloc/usr/include/ext2fs/
FSWfsmisc/reloc/usr/include/ext2fs/bitops.h
FSWfsmisc/reloc/usr/include/ext2fs/ext2_err.h
FSWfsmisc/reloc/usr/include/ext2fs/ext2_fs.h
FSWfsmisc/reloc/usr/include/ext2fs/ext2_io.h
FSWfsmisc/reloc/usr/include/ext2fs/ext2_types.h
FSWfsmisc/reloc/usr/include/ext2fs/ext2fs.h
FSWfsmisc/reloc/usr/include/ntfs/
FSWfsmisc/reloc/usr/include/ntfs/attrib.h
FSWfsmisc/reloc/usr/include/ntfs/attrlist.h
FSWfsmisc/reloc/usr/include/ntfs/bitmap.h
FSWfsmisc/reloc/usr/include/ntfs/bootsect.h
FSWfsmisc/reloc/usr/include/ntfs/collate.h
FSWfsmisc/reloc/usr/include/ntfs/compat.h
FSWfsmisc/reloc/usr/include/ntfs/compress.h
FSWfsmisc/reloc/usr/include/ntfs/debug.h
FSWfsmisc/reloc/usr/include/ntfs/device.h
FSWfsmisc/reloc/usr/include/ntfs/device_io.h
FSWfsmisc/reloc/usr/include/ntfs/dir.h
FSWfsmisc/reloc/usr/include/ntfs/endians.h
FSWfsmisc/reloc/usr/include/ntfs/gnome-vfs-method.h
FSWfsmisc/reloc/usr/include/ntfs/gnome-vfs-module.h
FSWfsmisc/reloc/usr/include/ntfs/index.h
FSWfsmisc/reloc/usr/include/ntfs/inode.h
FSWfsmisc/reloc/usr/include/ntfs/layout.h
FSWfsmisc/reloc/usr/include/ntfs/lcnalloc.h
FSWfsmisc/reloc/usr/include/ntfs/list.h
FSWfsmisc/reloc/usr/include/ntfs/logfile.h
FSWfsmisc/reloc/usr/include/ntfs/logging.h
FSWfsmisc/reloc/usr/include/ntfs/mft.h
FSWfsmisc/reloc/usr/include/ntfs/mst.h
FSWfsmisc/reloc/usr/include/ntfs/ntfstime.h
FSWfsmisc/reloc/usr/include/ntfs/rich.h
FSWfsmisc/reloc/usr/include/ntfs/runlist.h
FSWfsmisc/reloc/usr/include/ntfs/security.h
FSWfsmisc/reloc/usr/include/ntfs/support.h
FSWfsmisc/reloc/usr/include/ntfs/tree.h
FSWfsmisc/reloc/usr/include/ntfs/types.h
FSWfsmisc/reloc/usr/include/ntfs/unistr.h
FSWfsmisc/reloc/usr/include/ntfs/version.h
FSWfsmisc/reloc/usr/include/ntfs/volume.h
FSWfsmisc/reloc/usr/info/
FSWfsmisc/reloc/usr/info/libext2fs.info.gz
FSWfsmisc/reloc/usr/lib/
FSWfsmisc/reloc/usr/lib/e2initrd_helper
FSWfsmisc/reloc/usr/lib/fs/
FSWfsmisc/reloc/usr/lib/fs/ext2fs/
FSWfsmisc/reloc/usr/lib/fs/ext2fs/mount
FSWfsmisc/reloc/usr/lib/fs/ntfs/
FSWfsmisc/reloc/usr/lib/fs/ntfs/mount
FSWfsmisc/reloc/usr/lib/gnome-vfs-2.0/
FSWfsmisc/reloc/usr/lib/gnome-vfs-2.0/modules/
FSWfsmisc/reloc/usr/lib/gnome-vfs-2.0/modules/libntfs-gnomevfs.a
FSWfsmisc/reloc/usr/lib/gnome-vfs-2.0/modules/libntfs-gnomevfs.la
FSWfsmisc/reloc/usr/lib/gnome-vfs-2.0/modules/libntfs-gnomevfs.so.1.0.0
FSWfsmisc/reloc/usr/lib/libcom_err.a
FSWfsmisc/reloc/usr/lib/libext2fs.a
FSWfsmisc/reloc/usr/lib/libntfs.la
FSWfsmisc/reloc/usr/lib/libntfs.so.9.0.0
FSWfsmisc/reloc/usr/sbin/
FSWfsmisc/reloc/usr/sbin/badblocks
FSWfsmisc/reloc/usr/sbin/blkid
FSWfsmisc/reloc/usr/sbin/debugfs
FSWfsmisc/reloc/usr/sbin/dumpe2fs
FSWfsmisc/reloc/usr/sbin/e2fsck
FSWfsmisc/reloc/usr/sbin/e2image
FSWfsmisc/reloc/usr/sbin/e2label
FSWfsmisc/reloc/usr/sbin/filefrag
FSWfsmisc/reloc/usr/sbin/findfs
FSWfsmisc/reloc/usr/sbin/fsck.ext2
FSWfsmisc/reloc/usr/sbin/fsck.ext3
FSWfsmisc/reloc/usr/sbin/logsave
FSWfsmisc/reloc/usr/sbin/mke2fs
FSWfsmisc/reloc/usr/sbin/mkfs.ext2
FSWfsmisc/reloc/usr/sbin/mkfs.ext3
FSWfsmisc/reloc/usr/sbin/mklost+found
FSWfsmisc/reloc/usr/sbin/mkntfs
FSWfsmisc/reloc/usr/sbin/ntfsclone
FSWfsmisc/reloc/usr/sbin/ntfscp
FSWfsmisc/reloc/usr/sbin/ntfslabel
FSWfsmisc/reloc/usr/sbin/ntfsresize
FSWfsmisc/reloc/usr/sbin/ntfsundelete
FSWfsmisc/reloc/usr/sbin/tune2fs
FSWfsmisc/reloc/usr/share/
FSWfsmisc/reloc/usr/share/locale/
FSWfsmisc/reloc/usr/share/locale/cs/
FSWfsmisc/reloc/usr/share/locale/cs/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/cs/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/de/
FSWfsmisc/reloc/usr/share/locale/de/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/de/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/es/
FSWfsmisc/reloc/usr/share/locale/es/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/es/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/fr/
FSWfsmisc/reloc/usr/share/locale/fr/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/fr/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/it/
FSWfsmisc/reloc/usr/share/locale/it/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/it/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/nl/
FSWfsmisc/reloc/usr/share/locale/nl/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/nl/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/pl/
FSWfsmisc/reloc/usr/share/locale/pl/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/pl/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/rw/
FSWfsmisc/reloc/usr/share/locale/rw/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/rw/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/sv/
FSWfsmisc/reloc/usr/share/locale/sv/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/sv/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/locale/tr/
FSWfsmisc/reloc/usr/share/locale/tr/LC_MESSAGES/
FSWfsmisc/reloc/usr/share/locale/tr/LC_MESSAGES/e2fsprogs.mo
FSWfsmisc/reloc/usr/share/man/
FSWfsmisc/reloc/usr/share/man/man1/
FSWfsmisc/reloc/usr/share/man/man1/chattr.1
FSWfsmisc/reloc/usr/share/man/man1/lsattr.1
FSWfsmisc/reloc/usr/share/man/man1/uuidgen.1
FSWfsmisc/reloc/usr/share/man/man5/
FSWfsmisc/reloc/usr/share/man/man5/e2fsck.conf.5
FSWfsmisc/reloc/usr/share/man/man5/mke2fs.conf.5
FSWfsmisc/reloc/usr/share/man/man8/
FSWfsmisc/reloc/usr/share/man/man8/badblocks.8
FSWfsmisc/reloc/usr/share/man/man8/blkid.8
FSWfsmisc/reloc/usr/share/man/man8/debugfs.8
FSWfsmisc/reloc/usr/share/man/man8/dumpe2fs.8
FSWfsmisc/reloc/usr/share/man/man8/e2fsck.8
FSWfsmisc/reloc/usr/share/man/man8/e2image.8
FSWfsmisc/reloc/usr/share/man/man8/e2label.8
FSWfsmisc/reloc/usr/share/man/man8/filefrag.8
FSWfsmisc/reloc/usr/share/man/man8/findfs.8
FSWfsmisc/reloc/usr/share/man/man8/fsck.ext2.8
FSWfsmisc/reloc/usr/share/man/man8/fsck.ext3.8
FSWfsmisc/reloc/usr/share/man/man8/libntfs-gnomevfs.8
FSWfsmisc/reloc/usr/share/man/man8/logsave.8
FSWfsmisc/reloc/usr/share/man/man8/mke2fs.8
FSWfsmisc/reloc/usr/share/man/man8/mkfs.ext2.8
FSWfsmisc/reloc/usr/share/man/man8/mkfs.ext3.8
FSWfsmisc/reloc/usr/share/man/man8/mklost+found.8
FSWfsmisc/reloc/usr/share/man/man8/mkntfs.8
FSWfsmisc/reloc/usr/share/man/man8/ntfscat.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsclone.8
FSWfsmisc/reloc/usr/share/man/man8/ntfscluster.8
FSWfsmisc/reloc/usr/share/man/man8/ntfscmp.8
FSWfsmisc/reloc/usr/share/man/man8/ntfscp.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsfix.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsinfo.8
FSWfsmisc/reloc/usr/share/man/man8/ntfslabel.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsls.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsmount.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsprogs.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsresize.8
FSWfsmisc/reloc/usr/share/man/man8/ntfsundelete.8
FSWfsmisc/reloc/usr/share/man/man8/tune2fs.8
root@opensolaris:~/software#
root@opensolaris:~/software# pkgadd -d . FSWfsmisc
root@opensolaris:~/software# rmformat -l
Looking for devices...
     1. Logical Node: /dev/rdsk/c10t0d0p0
        Physical Node: /pci@0,0/pci1458,5006@1d,7/storage@1/disk@0,0
        Connected Device: ST350032 0NS
        Device Type: Removable
        Bus: USB
        Size: 476.9 GB
        Label: <Unknown>
        Access permissions: Medium is not write protected.
     2. Logical Node: /dev/rdsk/c7t0d0p0
        Physical Node: /pci@0,0/pci-ide@1f,2/ide@1/sd@0,0
        Connected Device: PIONEER  DVD-RW  DVR-212  1.24
        Device Type: DVD Reader/Writer
        Bus: IDE
        Size: <Unknown>
        Label: <Unknown>
        Access permissions: <Unknown>
root@opensolaris:~/software# mount -F ntfs /dev/rdsk/c10t0d0p0 /rmdisk/
root@opensolaris:~/software#
root@opensolaris:~/software# cd /rmdisk/
root@opensolaris:/rmdisk# ls
admin  a.txt  now  System Volume Information  three  www1  www2
root@opensolaris:/rmdisk#
成功了!
http://blogs.sun.com/mandalika/entry/mounting_windows_ntfs_on_open

疑似ARP attack 常用的cmd

arp attack原理很簡單,主要是利用arp protocol的弱點,我的理解是,攻擊的機器可以主動申請被攻擊的機器修改自己的 arp cache table, 問題就在這裡,所以,所有的攻擊和反攻擊也是圍繞它來進行

arp 的命令

[root@TEST2 ~]# arp  #主要是查詢本機內的arp cache table
Address                  HWtype  HWaddress           Flags Mask            Iface
server.aaa.com       ether   00:AA:BB:CC:DD:2C   C                     eth0
172.16.1.67              ether   00:1E:4F:C8:66:08   C                     eth0

如何獲得所有的本段的MAC呢?

發起一個廣播

ping –b <ip段>

例如

[root@CRRACTEST2 ~]# ping -b 172.16.1.255
WARNING: pinging broadcast address
PING 172.16.1.255 (172.16.1.255) 56(84) bytes of data.
64 bytes from 172.16.1.68: icmp_seq=1 ttl=64 time=0.320 ms
64 bytes from 172.16.1.124: icmp_seq=1 ttl=64 time=0.326 ms (DUP!)
64 bytes from 172.16.1.112: icmp_seq=1 ttl=64 time=0.501 ms (DUP!)
64 bytes from 172.16.1.17: icmp_seq=1 ttl=64 time=0.506 ms (DUP!)
64 bytes from 172.16.1.83: icmp_seq=1 ttl=64 time=0.530 ms (DUP!)
64 bytes from 172.16.1.31: icmp_seq=1 ttl=255 time=0.553 ms (DUP!)
64 bytes from 172.16.1.25: icmp_seq=1 ttl=64 time=1.12 ms (DUP!)
64 bytes from 172.16.1.200: icmp_seq=1 ttl=64 time=1.45 ms (DUP!)
64 bytes from 172.16.1.254: icmp_seq=1 ttl=64 time=2.46 ms (DUP!)
64 bytes from 172.16.1.250: icmp_seq=1 ttl=64 time=6.71 ms (DUP!)

目的是獲得(更新)arp cache table  <IP MAC>

[root@CRRACTEST2 ~]# arp
Address                  HWtype  HWaddress           Flags Mask            Iface
172.16.1.25              ether   00:15:C7:8F:B6:D0   C                     eth0
172.16.1.67              ether   00:1E:5F:C6:44:08   C                     eth0
172.16.1.83              ether   00:0C:40:72:D4:21   C                     eth0
[root@CRRACTEST2 ~]#

 

如何根據MAC獲取IP呢?

arp -n |grep EC:4F  |awk '{print $1}'

nmap -sP 172.16.1.0/24 |grep arp -n |grep EC:6F  |awk '{print $1}'

[root@test ~]# rpm -Uvh fping-2.4-1.b2.2.el5.rf.x86_64.rpm
warning: fping-2.4-1.b2.2.el5.rf.x86_64.rpm: Header V3 DSA signature: NOKEY, key ID 6b8d79e6
Preparing...                ########################################### [100%]
   1:fping                  ########################################### [100%]

fping -v
fping: Version 2.4b2_to_ipv6 $Date: 2002/01/16 00:33:42 $
fping: comments to david@remote.net
fping -c 1 -g 172.16.1.0/24

 

如果發現arp cache table中發現2個ip對應MAC相同, 或者 gatway的不是缺省設定的,就有要引起懷疑了

另外,在gatway 的設定時儘量不要使用192.168.*.1 or 172.16.*.1類似的 IP地址, 而是使用 *.2 這樣也可以繞過一些attack tool