e10835 net reference
/u01/app/oracle/diag/tnslsnr/oracle1/listener/trace/listener.log
TIMESTAMP * CONNECT DATA [* PROTOCOL INFO] * EVENT [* SID] * RETURN CODE
#######################################
tnsping时会出现下面的日志项
Thu Mar 30 16:45:52 2017
30-MAR-2017 16:45:52 * ping * 0
#######################################
每30秒update一次
Wed Mar 29 17:15:49 2017
29-MAR-2017 17:15:49 * service_update * aa * 0
Wed Mar 29 17:16:19 2017
29-MAR-2017 17:16:19 * service_update * aa * 0
Wed Mar 29 17:16:49 2017
29-MAR-2017 17:16:49 * service_update * aa * 0
Wed Mar 29 17:17:10 2017
29-MAR-2017 17:17:10 * service_update * aa * 0
Wed Mar 29 17:17:49 2017
29-MAR-2017 17:17:49 * service_update * aa * 0
Wed Mar 29 17:18:19 2017
29-MAR-2017 17:18:19 * service_update * aa * 0
#######################################
29-MAR-2017 17:58:44 * service_register * aa * 0
15-NOV-2016 08:39:32 * service_died * DBUA3838241 * 12537
WARNING: Subscription for node down event still pending
#######################################
有客户端连接时，就会有下面的日志项
29-MAR-2017 17:14:20 * (CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=aa)(CID=(PROGRAM=D:Program?Files??x86?IPinstantclient-basic-windows.x64-11.2.0.4.0instantclient_11_2sqlplus.exe)(HOST=DESKTOP-NMUHAH0)(USER=fgy))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.10.99)(PORT=50901)) * establish * aa * 0
运行下面的命令时会有下面的日志项
lsnrctl>services
Wed Mar 29 17:20:46 2017
29-MAR-2017 17:20:46 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=oracle1)(USER=oracle))(COMMAND=services)(ARGUMENTS=64)(SERVICE=LISTENER)(VERSION=186647552)) * services * 0
用admin通过浏览器访问时，就会有下面的日志项
Wed Mar 29 18:27:21 2017
29-MAR-2017 18:27:21 * (CONNECT_DATA=(SID=testdb)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=root))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.60.14)(PORT=56553)) * establish * testdb * 0
#######################################
通过程序去连接时时，就会有下面的日志项
好像分两部分
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=58056)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=63405)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=26675)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=37961)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=44298)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=2647)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=56995)) * establish * stbaoka * 0
30-MAR-2017 17:21:52 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=songlin_xie_n22))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=16633)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=47311)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=16602)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=15513)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=54723)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=63255)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=30379)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=4706)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=24433)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=6087)) * establish * stbaoka * 0
30-MAR-2017 17:22:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=43191)) * establish * stbaoka * 0
#######################################
Fri Jan 20 14:39:28 2017
20-JAN-2017 14:39:28 * (CONNECT_DATA=(SID=stbaoka)(CID=(PROGRAM=null)(HOST=__jdbc__)(USER=null))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=18459)) * establish * stbaoka * 0
20-JAN-2017 14:39:28 * (CONNECT_DATA=(SID=stbaoka)(CID=(PROGRAM=SQL Developer)(HOST=__jdbc__)(USER=fgy))) * (ADDRESS=(PROTOCOL=tcp)(HOST=124.115.229.210)(PORT=20065)) * establish * stbaoka * 0
16-FEB-2017 17:38:54 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=root))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=root))) * (ADDRESS=(PROTOCOL=tcp)(HOST=117.34.72.196)(PORT=45530)) * establish * stbaoka * 0
16-FEB-2017 17:38:55 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=root))(SERVICE_NAME=stbaoka)(CID=(PROGRAM=)(HOST=__jdbc__)(USER=root))) * (ADDRESS=(PROTOCOL=tcp)(HOST=117.34.72.196)(PORT=45531)) * establish * stbaoka * 0
#######################################
[oracle@cn-111-testdb trace]$ oerr tns 12537
12537, 00000, "TNS:connection closed"
// *Cause: "End of file" condition has been reached; partner has disconnected.
// *Action: None needed; this is an information message.
[oracle@cn-111-testdb trace]$ oerr help
Usage: oerr facility error
Facility is identified by the prefix string in the error message.
For example, if you get ORA-7300, "ora" is the facility and "7300"
is the error. So you should type "oerr ora 7300".
If you get LCD-111, type "oerr lcd 111", and so on.
服务器端的sqlnet.log
/u01/app/oracle/product/11.2/db_1/network/log/sqlnet.log
客户端的sqlnet.log
/u01/app/oracle/diag/clients/user_oracle/host_839358077_80/trace/sqlnet.log
C:UsersfgyOracleoradiag_fgydiagclientsuser_fgyhost_3210449687_80 race
Directory does not exist for read/write [/u01/app/oracle/product/11.2.0/dbhome_1/log] [/u01/app/oracle/product/11.2.0/dbhome_1/log/diag/clients]
***********************************************************************
Fatal NI connect error 12520, connecting to:
(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.20.102)(PORT=1521))(CONNECT_DATA=(SERVER=shared)(SERVICE_NAME=wode)(CID=(PROGRAM=sqlplus@cu-kvm1)(HOST=cu-kvm1)(USER=oracle))))
VERSION INFORMATION:
TNS for Linux: Version 11.2.0.4.0 - Production
TCP/IP NT Protocol Adapter for Linux: Version 11.2.0.4.0 - Production
Time: 02-APR-2017 11:46:45
Tracing not turned on.
Tns error struct:
ns main err code: 12564
TNS-12564: TNS:connection refused
ns secondary err code: 0
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
#######################################
16-22
in the log file by the network layer
16-44
session layer controls the connection
#######################################
select * from v$queue;
select * from v$dispatcher;
select * from v$dispatcher_config;
select * from v$dispatcher_rate;
select * from V$SHARED_SERVER;
#######################################
SQL> connect lcpsys@(description=(address=(protocol=tcp)(host=192.168.10.104)(port=1521))(connect_data=(sid=aa)))
Enter password:
Connected.
SQL>
#######################################
动态非默认端口
1tnsnames.ora
2local_listener参数
alter system set local_listener='testdb';
立即注册，而不是等待60秒，pmon进程周期性的联系listener
SQL> alter system register;
#######################################
sqlnet.ora
存储在两个位置
/u01/app/oracle/product/11.2.0/dbhome_1/network/admin/
或者TNS_ADMIN环境变量指定的位置
###################################
Non-ADR parameters listed in the sqlnet.ora file are ignored
when ADR is enabled. ADR is enabled by default.
The default value of DIAG_ADR_ENABLED is on. Therefore,
the DIAG_ADR_ENABLED parameter must explicitly be set to off in order
for non-ADR tracing to be used.
###################################
具体参数
与防火墙类似的功能，Oracle 提供限制与允许特定的IP或主机名通过Oracle Net来访问数据库。这个功能由sqlnet.ora配置文件来实
现。该文件通常$ORACLE_HOME/network/admin/ 目录下，与tnsnames.ora以及listener.ora位于同一路径。用法也比较简单。通过监听器的
限制，实现轻量级访问限制，比在数据库内部通过触发器进行限制效率要高。
1.通常情况下，更倾向于使用excluded_nodes参数。
tcp.validnode_checking = yes
tcp.invited_nodes = (hostname1,hostname2,ip1,ip2)
tcp.excluded_nodes = (10.103.11.17,hostname1,hostname2)
使用excluded_nodes与invited_nodes的一些特性
不支持通配符的使用(如hostname不能写为svhs0*，IP地址不能写为10.103.11.*）
excluded_nodes与invited_nodes为互斥方式，要么使用前者，要么使用后者
如果tcp.invited_nodes与tcp.excluded_nodes都存在，则tcp.invited_nodes优先
要将本地地址，或者Cluster群集其他节点的地址都加入到允许列表，否则监听器可能无法启动
修改之后，一定要重起监听或reload才能生效，而不需要重新启动数据库
仅提供对TCP/IP协议的支持
#######################
To specify the order of the naming methods used for client name resolution lookups.
NAMES.DIRECTORY_PATH=(tnsnames, ldap, ezconnect)
#######################