1.获得归档日志暴增时段的一个归档日志：可以查询v$archived_log视图，结合completion_time列进行定位 2.对该归档日志进行转储dump ALTER SYSTEM DUMP LOGFILE /u01/oracle/V7323/dbs/arch1_76.dbf; --请将路径修改成当时的redo归档的路径 以上命令会在user_
ALTER SYSTEM DUMP LOGFILE '/u01/oracle/V7323/dbs/arch1_76.dbf';
以上命令会在user_dump_dest中生成一个trace文件，请将该trace文件传到linux中（root用户or oracle用户均可）
[root@hosta ~]# grep -A2 "^REDO RECORD" his_ora_29032886_dump_arch.trc > redo.log
[root@hosta ~]# grep OBJ: redo.log |awk -F "OBJ:" '{print $2}'|awk '{print $1}'|sort -n|uniq -c |sort -n -r
2038012 4294967295 <----出现了2038012次。
107 60635
60 60464
30 59848
29 62992
29 60669
9 59810
8 60706
8 59842
[root@hosta ~]# grep OBJ: redo.log |awk -F "OBJ:" '{print $2}' | more
4294967295 SCN:0x0001.96090e1b SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e1e SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e1f SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e20 SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e21 SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e22 SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e23 SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e24 SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e25 SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e26 SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e27 SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e28 SEQ: 1 OP:5.4
4294967295 SCN:0x0001.96090e29 SEQ: 1 OP:5.2
4294967295 SCN:0x0001.96090e29 SEQ: 2 OP:5.4OP:5.2 Undo Header OP:5.4 Commit
[root@hosta ~]# grep -A2 "^CHANGE #" his_ora_29032886_dump_arch.trc > redo_c.log
[root@hosta ~]# grep OBJ: redo_c.log |awk -F "OBJ:" '{print $2}'|awk '{print $1}'|sort -n|uniq -c |sort -n -r
[root@hosta ~]# grep OBJ: redo_c.log |awk -F "OBJ:" '{print $2}'|awk '{print $1}'|sort -n|uniq -c |sort -n -r
3057384 4294967295
1018128 15
279 60669
174 60635[root@hosta ~]# grep OBJ: redo_c.log | more CHANGE #1 TYP:0 CLS:15 AFN:1 DBA:0x00400009 OBJ:4294967295 SCN:0x0001.96090e1b SEQ: 1 OP:5.2 CHANGE #2 TYP:0 CLS:16 AFN:1 DBA:0x0040000a OBJ:4294967295 SCN:0x0001.96090e1a SEQ: 1 OP:5.1 CHANGE #3 TYP:2 CLS: 1 AFN:1 DBA:0x0040006a OBJ:15 SCN:0x0001.96090e1b SEQ: 1 OP:11.5 CHANGE #1 TYP:0 CLS:15 AFN:1 DBA:0x00400009 OBJ:4294967295 SCN:0x0001.96090e1e SEQ: 1 OP:5.4 CHANGE #1 TYP:0 CLS:15 AFN:1 DBA:0x00400009 OBJ:4294967295 SCN:0x0001.96090e1f SEQ: 1 OP:5.2 CHANGE #2 TYP:0 CLS:16 AFN:1 DBA:0x0040000a OBJ:4294967295 SCN:0x0001.96090e1e SEQ: 1 OP:5.1 CHANGE #3 TYP:2 CLS: 1 AFN:1 DBA:0x0040006a OBJ:15 SCN:0x0001.96090e1f SEQ: 1 OP:11.5 CHANGE #1 TYP:0 CLS:15 AFN:1 DBA:0x00400009 OBJ:4294967295 SCN:0x0001.96090e20 SEQ: 1 OP:5.4 CHANGE #1 TYP:0 CLS:15 AFN:1 DBA:0x00400009 OBJ:4294967295 SCN:0x0001.96090e21 SEQ: 1 OP:5.2 CHANGE #2 TYP:0 CLS:16 AFN:1 DBA:0x0040000a OBJ:4294967295 SCN:0x0001.96090e20 SEQ: 1 OP:5.1 CHANGE #3 TYP:2 CLS: 1 AFN:1 DBA:0x0040006a OBJ:15 SCN:0x0001.96090e21 SEQ: 1 OP:11.5
OP:5.1 Undo Recorder OP:5.2 Undo Header OP:5.4 Commit OP:11.5 Update Row Piece,也就是update操作，根据obj:15,就能确认是哪个对象上的update
