參考metalink的文檔:Doc ID: Note:3136.1 and 465043.1
WARNING: inbound connection timed out (ORA-3136)
1.參數(shù)含義:
SQLNET.INBOUND_CONNECT_TIMEOUT is set to a value in seconds and determines how long a client has to
provide the necessary authentication information to a database.
INBOUND_CONNECT_TIMEOUT_listenername is set to a value in seconds and determines how long a client has
to complete its connect request to the listener after the network connection has been established.
2.參數(shù)意義:
在oracle 10.2以后的版本當(dāng)中將SQLNET.INBOUND_CONNECT_TIMEOUT 和 INBOUND_CONNECT_TIMEOUT_listenername參
數(shù)設(shè)置缺省為60s,之前的版本當(dāng)中默認(rèn)為0(即關(guān)閉此功能)。這兩個(gè)參數(shù)用于防止惡意client通過(guò)網(wǎng)絡(luò)攻擊db
server
Note: This timeout restriction was introduced to combat Denial of Service (DoS) attack whereby
malicious clients attempt to flood database servers with connect requests that consumes resources.
3.報(bào)出此warning的原因如下:
a.server收到一個(gè)從惡意client發(fā)來(lái)的連接請(qǐng)求,在這種情況下拋出的錯(cuò)誤將是預(yù)期的和可取的。(客戶(hù)端反復(fù)輸錯(cuò)
username/password)
b.服務(wù)器接收到一個(gè)有效的客戶(hù)端連接請(qǐng)求,但客戶(hù)需要很長(zhǎng)時(shí)間來(lái)驗(yàn)證超過(guò)默認(rèn)60秒。(客戶(hù)端網(wǎng)絡(luò)延遲)
c.DB服務(wù)器負(fù)載很高導(dǎo)致它無(wú)法在指定時(shí)間內(nèi)完成客戶(hù)端登錄請(qǐng)求。(數(shù)據(jù)庫(kù)服務(wù)器高負(fù)載)
4.解決辦法:
a.驗(yàn)證db server端,本地連接是否成功(listener是否可用)
b.驗(yàn)證本地連接是否延遲(本地網(wǎng)絡(luò)是否高效可用)
c.驗(yàn)證數(shù)據(jù)庫(kù)性能(db server是否高負(fù)載)
d.告警日志是否在之前報(bào)過(guò)ORA-600或ORA-7445
e.檢查是否有client反復(fù)嘗試登錄密碼(這是目前最有可能的原因)
f.關(guān)閉此功能(將2參數(shù)設(shè)置為0,設(shè)置方法參照步驟5)也可將2參數(shù)設(shè)置為適當(dāng)值。
5.修改這兩個(gè)參數(shù)的方法如下:
Edit the server side sqlnet.ora file and add this parameter:
SQLNET.INBOUND_CONNECT_TIMEOUT=<n>? Where <n> is the value in seconds.
E.g.:
SQLNET.INBOUND_CONNECT_TIMEOUT = 120
Edit the listener.ora file and add this parameter:
INBOUND_CONNECT_TIMEOUT_<listenername> = <n>? Again, where <n> is the timeout value in seconds.?
For example if the listener name is LISTENER then use:
INBOUND_CONNECT_TIMEOUT_LISTENER = 110
6.總結(jié):
此warning提示,極有可能是有客戶(hù)端在不知道密碼的情況下,反復(fù)嘗試連接數(shù)據(jù)庫(kù)或登錄延遲導(dǎo)致,個(gè)人認(rèn)為可以
忽略,重啟監(jiān)聽(tīng)并不會(huì)解決該問(wèn)題,只是暫時(shí)清空了監(jiān)聽(tīng)的告警信息,也可觀察一段時(shí)間,或抓取性能分析報(bào)告,確
認(rèn)是否為負(fù)載過(guò)高導(dǎo)致性能下降從而引起的告警。
?
?
:ORA-3136 錯(cuò)誤解決
:ORA-3136 錯(cuò)誤解決
1、首先通過(guò)后臺(tái)alter日志發(fā)現(xiàn)報(bào)如下錯(cuò)誤:
Mon May 20 12:44:19 2013
WARNING: inbound connection timed out (ORA-3136)
Mon May 20 12:44:19 2013
WARNING: inbound connection timed out (ORA-3136)
Mon May 20 12:44:19 2013
WARNING: inbound connection timed out (ORA-3136)
?
2、觀察sqlnet.log中記錄如下錯(cuò)誤:
Fatal NI connect error 12514, connecting to:
?(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=XXXXX)(PORT=1521))(CONNECT_DATA=(SERVER=DEDICATED)
(SERVICE_NAME=XXXXXXXX)(INSTANCE_NAME=XXXX)(CID=(PROGRAM=XXXXXX)(HOST=XXXXXX)
(USER=oracle))))
? VERSION INFORMATION:
?TNS for Linux: Version 10.2.0.1.0 - Production
?TCP/IP NT Protocol Adapter for Linux: Version 10.2.0.1.0 - Production
? Time: 28-11月-2008 14:10:42
? Tracing not turned on.
? Tns error struct:
??? ns main err code: 12564
??? TNS-12564: TNS:connection refused
??? ns secondary err code: 0
??? nt main err code: 0
??? nt secondary err code: 0
??? nt OS err code: 0
?
3、重新reload一下Listner:
??
[oracle@XXX ~]$ lsnrctl
LSNRCTL for Linux: Version 10.2.0.4.0 - Production on 20-5月 -2013 12:54:56
Copyright (c) 1991, 2007, Oracle.? All rights reserved.
Welcome to LSNRCTL, type "help" for information.
?
LSNRCTL> reload
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
The command completed successfully
?
LSNRCTL> services
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
Services Summary...
Service "+ASM" has 1 instance(s).
? Instance "+ASM2", status BLOCKED, has 1 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:0 refused:0 state:ready
???????? LOCAL SERVER
Service "+ASM_XPT" has 1 instance(s).
? Instance "+ASM2", status BLOCKED, has 1 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:0 refused:0 state:ready
???????? LOCAL SERVER
Service "PLSExtProc" has 1 instance(s).
? Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:0 refused:0
???????? LOCAL SERVER
Service "XXXXXXXX" has 2 instance(s).
? Instance "XXXXXX", status READY, has 1 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:16 refused:0 state:ready
???????? REMOTE SERVER
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXXXXX)(PORT=1521))
? Instance "XXXXXX", status READY, has 2 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:0 refused:0 state:ready
???????? REMOTE SERVER
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXXX)(PORT=1521))
????? "DEDICATED" established:31 refused:0 state:ready
???????? LOCAL SERVER
Service "XXXXXXXXX" has 2 instance(s).
? Instance "XXXXXX", status READY, has 1 handler(s) for this service...
??? Handler(s):
????? "D000" established:0 refused:0 current:0 max:972 state:ready
???????? DISPATCHER <machine: XXXXXXX, pid: 28579>
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXXX)(PORT=6661))
? Instance "XXXXXX", status READY, has 1 handler(s) for this service...
??? Handler(s):
????? "D000" established:0 refused:0 current:0 max:1022 state:ready
???????? DISPATCHER <machine: XXXX, pid: 28800>
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXX)(PORT=51924))
Service "XXXXXXXX" has 2 instance(s).
? Instance "XXXXXXX", status READY, has 1 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:16 refused:0 state:ready
???????? REMOTE SERVER
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXX)(PORT=1521))
? Instance "XXXXXXX", status READY, has 2 handler(s) for this service...
??? Handler(s):
????? "DEDICATED" established:0 refused:0 state:ready
???????? REMOTE SERVER
???????? (ADDRESS=(PROTOCOL=tcp)(HOST=XXXXXXX)(PORT=1521))
????? "DEDICATED" established:31 refused:0 state:ready
???????? LOCAL SERVER
The command completed successfully
LSNRCTL> show inbound_connect_timeout
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
LISTENER parameter "inbound_connect_timeout" set to 60
The command completed successfully
?
4、修改之后觀察一段時(shí)間系統(tǒng)恢復(fù)正常。
?
更多文章、技術(shù)交流、商務(wù)合作、聯(lián)系博主
微信掃碼或搜索:z360901061

微信掃一掃加我為好友
QQ號(hào)聯(lián)系: 360901061
您的支持是博主寫(xiě)作最大的動(dòng)力,如果您喜歡我的文章,感覺(jué)我的文章對(duì)您有幫助,請(qǐng)用微信掃描下面二維碼支持博主2元、5元、10元、20元等您想捐的金額吧,狠狠點(diǎn)擊下面給點(diǎn)支持吧,站長(zhǎng)非常感激您!手機(jī)微信長(zhǎng)按不能支付解決辦法:請(qǐng)將微信支付二維碼保存到相冊(cè),切換到微信,然后點(diǎn)擊微信右上角掃一掃功能,選擇支付二維碼完成支付。
【本文對(duì)您有幫助就好】元
