DMZ web server-> inside the database server

Suppose that a network topology looks like this:

A PIX with 3 interfaces:

interface (private public static IP 10.10.10.1)

interface (public static IP of 69.110.38.35)

interface (static IP private address of the 30.30.30.1)

--------------------------------------------

The internal network has a {server} with the IP address of 10.10.10.2.

The DMZ has a {web server} with the IP address of 30.30.30.2.

I will welcome external guests (outside) access to the web server (30.30.30.2) via port 80.

This web server access turn the database server (10.10.10.2).

Assume that all other commands are issued. Then, I'll create an access list that allows server WWW DMZ to communicate with inside the database server.

access-list dmz-to-inside permit tcp host 30.30.30.2 host 10.10.10.2 eq 1521

Should I publish the following, too:

(1) access-list dmz permit tcp host 30.30.30.2 no matter what 80 eq

(2) access-group in interface dmz dmz

(3) static (inside the dmz) 10.10.10.0 10.10.10.0 netmask 255.255.255.0

xlate clear 4)

If so, what each of them do?

Thank you for helping.

Scott

1. Yes, the static statement "10.10.10.0 static (inside, dmz) 10.10.10.0 netmask 255.255.255.0" will disable NAT. Although it is not necessary to disable nat, however, it saves money and simple to manage. the reason for this is the traffic between the dmz and inside is private, there is therefore not necessary to apply the public ip address.

2 pix receives the package intended to 30.30.30.2 10.10.10.2. PIX examines the static statement and based on the static above statement, pix will not nat package (i.e. pix will leave the soruce address be) and send it to 30.30.30.2 via the interface of the demilitarized zone.

for example

original package - source 10.10.10.2, destination 30.30.30.2

After pix - source 10.10.10.2, destination 30.30.30.2

3. the "Clear xlate" command must be issued whenever the nat/global or static has been added/deleted/modified. This command is to force the pix to clear the existing ip translation.

for example, before you add the command "static 1.1.1.1 (indoor, outdoor) 192.168.1.100 netmask 255.255.255.255", the pix may already have an ip 192.168.1.100 translation (it might come from the nat/global). now, after you apply the static command, the pix will keep the existing translation for a certain period time. 'clear xlate' is needed to erase the old translation and so to activate the new static statement.

Tags: Cisco Security

Similar Questions

  • No NAT DMZ web server when you access by internal users

    How can I create an exception to allow users to access a web server on port 80 in the demilitarized zone inside? They cannot do that now because, in my view, the server goes through a NAT the public address, so how can I set up where a request from inside on port 80 on this server will not translate the IP of the server to a public IP address (via NAT)?

    static (i, dmz) internal_net internal_net /xx

    The CCIE Security

  • Physical P2V DMZ web server Esxi 5, 5-how.

    I have currently only a single DMZ, a physical Server 2008 web server.  We want to convert a virtual machine on a host Esxi 5.5.

    What are the steps to get there?   I can't ping on the Esxi host from the server DMZ, which ports are open on the firewall to make it happen?

    Take a look at this article: required VMware vCenter Converter 4.x/5.x ports (1010056)

  • cannot ping in dmz subnet from inside the subnet

    Hey guys

    can someone pls take a look at this config in my 515 and tell me why I can't ping from host 10.2.1.20 (connected inside interface) to host (connected to the dmx interface) 10.3.1.20...

    Thanks ;)

    6.3 (3) version PIX

    interface ethernet0 car

    interface ethernet1 100full

    stop 100full interface ethernet2

    interface ethernet3 100full

    stop 100full interface ethernet4

    interface ethernet5 100full

    ethernet0 nameif outside security0

    nameif ethernet1 inside the security100

    ethernet2 intf2 security2 nameif

    nameif ethernet3 intf3 interieure4

    nameif ethernet4 intf4 securite6

    nameif dmz security50 ethernet5

    enable password xxxx

    passwd xxxx

    hostname MYHOSTNAME

    domain MYDOMAINNAME.local

    fixup protocol dns-length maximum 512

    fixup protocol ftp 21

    fixup protocol h323 h225 1720

    fixup protocol h323 ras 1718-1719

    fixup protocol http 80

    fixup protocol rsh 514

    fixup protocol rtsp 554

    fixup protocol sip 5060

    fixup protocol sip udp 5060

    fixup protocol 2000 skinny

    fixup protocol smtp 25

    fixup protocol sqlnet 1521

    fixup protocol tftp 69

    names of

    inside_access_in ip access list allow a whole

    pager lines 24

    Outside 1500 MTU

    Within 1500 MTU

    intf2 MTU 1500

    intf3 MTU 1500

    intf4 MTU 1500

    MTU 1500 dmz

    IP address outside 61.29.xxx.xxx 255.255.255.248

    IP address inside 10.2.1.11 255.255.255.0

    No intf2 ip address

    No intf3 ip address

    No intf4 ip address

    10.3.1.11 dmz IP address 255.255.255.0

    alarm action IP verification of information

    alarm action attack IP audit

    no failover

    failover timeout 0:00:00

    failover poll 15

    No IP failover outdoors

    No IP failover inside

    no failover ip address intf2

    no failover ip address intf3

    no failover ip address intf4

    no failover ip address dmz

    history of PDM activate

    ARP timeout 14400

    Global interface 10 (external)

    NAT (inside) 10 0.0.0.0 0.0.0.0 0 0

    NAT (dmz) 10 10.3.1.0 255.255.255.0 0 0

    static (inside, dmz) 10.2.1.0 10.2.1.0 netmask 255.255.255.0 0 0

    inside_access_in access to the interface inside group

    Route outside 0.0.0.0 0.0.0.0 61.29.xxx.xxx 1

    Timeout xlate 03:00

    Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

    H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

    Timeout, uauth 0:05:00 absolute

    GANYMEDE + Protocol Ganymede + AAA-server

    RADIUS Protocol RADIUS AAA server

    AAA-server local LOCAL Protocol

    Enable http server

    http 10.2.1.0 255.255.255.0 inside

    No snmp server location

    No snmp Server contact

    SNMP-Server Community public

    SNMP-Server enable traps

    enable floodguard

    Telnet timeout 5

    SSH timeout 5

    Console timeout 0

    Terminal width 80

    Thanks again

    Rob

    ICMP is not a stateful Protocol, so you must explicitly allow ICMP traffic on the DMZ interface. Try adding the following:

    access-list dmz_access_in allow icmp a whole

    Access-group dmz_access_in in dmz interface

    I hope this helps.

    Scott

  • How to insert the web object inside the SCORM package?

    I want to put my own HTML page inside the SCORM package and open it then SCORM-courses will be publish in my LMS.

    So I tried to use web-object in Adobe Captivate and address bar entered page.html.

    Then I published SCORM 1.2 course and rolled my page.html inside this ZIP package.

    After that, I publish this course in Moodle LMS and SCORM-cloud.

    But this course was launched in both systems - page.html does not appear on the slides!

    In this case, I tried to put my page.html inside the SCORM package and after the publication of LMS must be downloaded to LMS as sending to the web server.

    As you can see I try to use the link, but it does not work.

    What I've done wrong?

    Any suggestions?

    If you use Captivate 8 or 9, you can zip the HTML page and insert into Captivate as a HTML5 Animation. This should work for you.

  • Deep Linking and currently a Web page inside the app

    Hello

    Is it possible to display a webpage site inside the App from the DPS? for example, the user click on the subscription banner/Sign Up, and the app will present page e-commerce from the website owner.

    Thank you

    If I understand the question, you have several options. You can create a banner with a URL. Target when the user clicks on the banner, the web page opens in a browser in app. The user then click done to dismiss the browser. Another option is to make a link to a Web site in an article.

  • I need to display a search form web app, inside the detail of another web application view. Anyone know

    I can't seem to get a search form web app to work within another page of detail web app. Anyone know if this is possible?

    I can view a list of web app; and the search engine works on a standard page. but when I try to load it into another web application details page, I get an error: "page not found". In this case, regarless of whether if I put {module_searchresuts} on the same page as the form or if I redirect the results to a different page.

    Does anyone have any suggestions?

    Thank you, but I needed to get the search form and the results of the Web A app to show inside the detail for the Web App B model... Apparently is not possible. I finished by simply using an iFrame - inase anyone who crosses the same question

  • Forms 6i save photo inside the database

    Dear people
    I have table with 2 fields no number (10), photo_path varchar2 (300)
    These 2 fields have the number and the path of photos, and I train to watch these paths and find the photo and save it to the database table.
    either way, I am using forms 6i and 8i db
    Please help me how to


    Published by: yasser_egypt on November 22, 2012 06:25

    Published by: yasser_egypt on November 22, 2012 06:43

    Hello Yasser

    I really don't know the reason, but it can be 2
    1 - the oracle_forms_patch18
    2 - the version of database
    and then ishould ask you about.
    have you applied the oracle_forms_patch18? because it may be one of the causes of this isseu

    If you apply this patch please apply it first to make sure it's not an isseu forms.

    If you don't have it you can download it from this link

    [http://www.epa.gov/storet/archive/Oracle_Forms_6i_Patch_18.exe]

    Respectfully
    Khaled Farouk

  • CF 11 Enterprise install App Server and IIS 8.5 on Web server (different material)

    Hi all.

    Facing a problem of configuration to set up here.  We have the application inside the firewall server and we will have on the DMZ Web server and this web server has to forward the requests to the server see

    I installed cfusion instance HTTP Port 8500 remote Port 8010 host is a local host, with no cluster.  We will have other forums as a result of a port in addition to HTTP and distance on the line.

    So now the question is how to run the connector.  If I run the embedded {cfroot}/cfusion/runtime/bin/wsconfig.exe, it shows localhost as server applications, well, the web server must be IIS, but on another IP address NOT this server, so that the OK button remains grey.

    You would think that you would need to run the connector on the Web server, right?  Well, I do not have CF installed on it, nor do I intend install on my web server, so how do I get on the Web server connector.

    I read a post on taking a wsconfig.jar and pulling the DLL and others, but it is with JRun 8 CF, CF 11 and not IIS 8.5.  Maybe it's the method that I need to follow, but seems to be the new land that has never been displayed in the CF community.  I like to think I'm 'special' but really?  I'm the first to have this set up the configuration, and no one has posted a BLOG about it.  Looks strange OR I'm totally missing something.

    Please let me know any suggestions on how to move forward.

    Running on window server 2012 R2 for CF Application Server and the Web server.  CF 11 E update 3.

    ColdFusion 11 environment distributed for connector with all sites:

    1. install ColdFusion11 on the other server.

    2. Once you install CF11, then copy the jar file "wsconfig.jar" from this location C:\ColdFusion11\cfusion\runtime\lib on the IIS server.

    3. configure IIS in the other server. You need to enable the following features at the IIS level only.

    ISAPI extensions

    ISAPI filters

    CGI

    ASP .NET

    5 ColdFusion11 server to connect to the Web server via the Port connector, which is located in the server.xml file. You can find this file in the C:\ColdFusion11\cfusion\runtime\conf, once you open the file server.xml, this is the port that you want.

    Example: -.

    6. Once you check everything in ColdFusion server, then return to the IIS Web server computer.

    7. the wsconfig.jar file which you copied in this server, rename the .jar to .zip file extension an excerpt it.

    [8. create a file with the same structure here magic C:\ColdFusion11\config\wsconfig\{Magic_Number}--[nombre would be 1, 2, 3... n]

    {9. now go to the extracted folder wsconfig and check this isapi_redirect.dll, copy the DLL to the folder C:\ColdFusion11\config\wsconfig\{Magic_Number}. If you have 32-bit 32-bit copy if you have 64-bit DLL and then copy 64 bit DLL.

    Location of the DLL in the extracted folder

    The 64-bit IIS DLL is located in connector\isapi\intel-win64\prebuilt\amd64\isapi_redirect.dll

    The 32-bit IIS DLL is in connector\isapi\intel-win\prebuilt\isapi_redirect.dll

    10. in the same folder of magic_number create a 'isapi_redirect.properties' file and copy this content. Now, the location and the magic_number might be different.

    extension_uri = /jakarta/isapi_redirect.dll

    Log_file = C:\ColdFusion11\config\wsconfig\1\isapi_redirect.log

    LOG_LEVEL = info

    worker_file = C:\ColdFusion11\config\wsconfig\1\workers.properties

    worker_mount_file = C:\ColdFusion11\config\wsconfig\1\uriworkermap.properties

    iis_buffer_enable = true

    ip_restriction_file = C:\ColdFusion11\config\wsconfig\1\iprestriction.properties

    AUTH_COMPLETE = 1

    11. create another file 'uriworkermap.properties' and copy the content slot

    / cfformgateway / * = cfusion

    / CFFormGateway / * = cfusion

    / flex2gateway / * = cfusion

    /flex2gateway = cfusion

    / cffileservlet / * = cfusion

    / CFFileServlet / * = cfusion

    / cfform-internal / * = cfusion

    / flashservices/gateway / * = cfusion

    / flex-internal / * = cfusion

    rest / / * = cfusion

    /*. CFML / * = cfusion

    /*. MXML = cfusion

    /*. As = cfusion

    *.cfm = cfusion

    /*. Ft3/min = cfusion

    /*. Ft3/min = cfusion

    / * .cfm / * = cfusion

    *.swc = cfusion

    /*. CFML = cfusion

    /*. CFML = cfusion

    /*. CFML = cfusion

    /*. CFC = cfusion

    /*. CFC = cfusion

    /*. CFC = cfusion

    / * .cfc / * = cfusion

    /*. CFR = cfusion

    *.cfswf = cfusion

    /*. SWS = cfusion

    *.jsp = cfusion

    *.hbmxml = cfusion

    12. create another file "workers.properties" and copy this content

    Worker.List = cfusion

    Worker.cfusion.type = ajp13

    Worker.cfusion.Host = localhost

    Worker.cfusion.port = 8014

    Worker.cfusion.max_reuse_connections = 250

    13. now go to a folder that is C:\ColdFusion11\config\wsconfig and copy the "cfwin32.dll". Location

    wsconfig\connectors\installers\intel-win\prebuilt\cfwin32.dll

    wsconfig\connectors\installers\intel-win64\prebuilt\cfwin32.dll

    14 create a file 'wsconfig.properties' and copy the sub content. Number of bits could be changes to 32 bit if you use the 32-bit environment, this file contains site information and the IIS connector. I created this article that you configure the connector with ALL IIS sites, so set below will work.

    1 = IIS, 0, true, "", bitness64 "

    1.SRV = localhost, cfusion

    15. now that we have created all the files and folders. We will add the IP address of the machine ColdFusion11 if IIS can communicate with CF11. There are 2 places to add the IP address.

    a. "workers.properties" file, where is written "localhost" replaced by the IP address and

    b. "wsconfig.properties" where is also said to replace localhost with the IP address of the machine ColdFusion11.

    16. now we must work on IIS services manager, then start the IIS Manager. We will make any changes to the IIS server and when we restart IIS, it inherits all the mappings Manager and filter ISAPI in all sites.

    17. click on the server and then click handler mapping. Add a script mapping and Add .cfm, .cfc, .cfml, .cfr, and .cfswf managers and then point it to this DLL. C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll.

    Click request restrictions, select Invoke and select the files and folders, and Ok. In the right pane, click Edit feature authorization select run.

    Example: Ask the path:-*.cfm

    Executable:-C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll

    Name:-cfmHandler

    NOTE: Add these Manager you will use not all add them.

    18. click on IIS server and select default Document and add index.cfm as default document.

    19. click on IIS server and select ISAPI and CGI Restriction, select Add and 'ISAPI and CGI path' 'C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll', Description "tomcat_All". Check Allow extension path to run and press Ok.

    Click on change the function parameter in the right panel and check both boxes.

    20. click on IIS server and select the ISAPI filters and add a filter name 'tomcat' and the executable file "C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll".

    21 now, add you a virtual directory to each site else it won't work. To add a directory virtual right click on your Web site and add a virtual directory. Alias name "jakarta" and the physical path "C:\ColdFusion11\config\wsconfig\1\isapi_redirect.dll" press Ok.

    Follow this step with the same Alias and path even to all Web sites.

    22 restart the IIS service, and run any ColdFusion page. It will work.

  • With the help of data from the database on my Web page

    Hello

    This is probably a simple great question, so I apologize in advance. I looked through a lot of information on BC and I can't seem to find the answer to my question (although a lot of it seems to go over my head that I'm a n00b full BC., and I feel that my hands are tied without being able to just stir up the something in Python or PHP!).

    I am trying to create a Web page that displays a single product (the entire site exists just for 1 product), and the user can click on the color chart of different color in order to customize it. I would like my client (owner of site) so you can easily add new colors (using the hexadecimal code) for different parts of the product.

    So I basically just need a place where the client can enter these values, and then I can write on my page in JavaScript format and build dynamic page using JavaScript.

    It seemed that the way to do would be to create a new "Web App" inside the BC. I did, and I created a "Web App Item" called "Data". Under "Data", I added a 'field Item' named 'Color', which is a multiline text area. I entered a few different hexadecimal codes like this:

    000000

    FFFFFF

    003366

    (I thought that I can analyze the lines with JS)

    The problem, I comes across however, is to know how to enter these data in my source code on my Web page? I created a Web page and I put the code in it:

    {module_webapps, 6042, one,}

    but this will display a list of links, with a link to 'Data', and then if you click on "Data" you go to a separate web page that says only: "Data" in this topic. Very strange.

    Is there a way I can get the data entered here in the source of my Web page? (Or is there a better way to do it?)

    As a more general question... It's basically just how use BC as a CMS and have custom fields that you can then access your web page. A bit like plugin, WordPress Advanced Custom Fields, if you're familiar with that. (I know that's not WordPress, but just a way that I can access certain values that my client has entered in)

    Thanks in advance!

    Heather

    You may be better to use electronic commerce and assign different attributes for your colors?

  • DMZ out OK; inside problems

    I have a Web server on a demilitarized zone which I want to access the inside network.

    Currently, I can access Internet from the DMZ Web server, the Web server of the Internet and the Web server would form inside.

    Access one another inside the machine while ssh would be in the Web server is that I can't do.

    This Web server will snapped a FTP mirror on the inside so I need this access.

    I've searched the forums and found several relevant examples, but the solutions have not worked for me.

    The example that I found was:

    +++

    "For the mail server (or any host on the DMZ) to access the inside to do the following:

    static (inside, dmz) 128.100.0.0 128.100.0.0 255.255.0.0 subnet mask

    fromDMZ list of allowed access host ip 192.168.0.2 128.100.0.0 255.255.0.0

    Access-group fromDMZ in dmz interface

    and for the zone demilitarized for access from the outside to do:

    "NAT (dmz) 1 192.168.0.0 255.255.255.0.

    +++

    If I activate the access on the DMZ interface group, I lose outside connectivity...?

    I currently have no liaison group on this CASE.

    Here are my relevant configuration lines:

    access-list 100 permit tcp any host 206.xxx.xxx.xxx eq www

    access-list 100 permit tcp any host 206.xxx.xxx.xxx eq ssh

    access-list 100 permit tcp any host 206.xxx.xxx.xxx eq ftp

    When I try to access machine and inside the demilitarized zone, I get the following error on the server logs:

    Incoming TCP connection deny from 10.xxx.xxx.xxx/1152 to 192.168.xxx.xxx/22 SYN flags on DMZ interface.

    static (DMZ, external) 206.xxx.xxx.xxx piggy netmask 255.255.255.255 0 0

    static (inside, DMZ) piggy Notes netmask 255.255.255.255 0 0

    FDPNATICK-2 FDPNATICK-2 static (inside, DMZ) mask of 255.255.0.0 subnet 0 0

    206 ~ is the range outside.

    192.168 ~ inside

    10 ~ is DMZ

    "piggy" is the DMZ server.

    'Notes' are I want to connect to the FTP server.

    TIA

    I think that the solution you found on the net was the right. You have lost connectivity to the outside because the access group you have applied has an invisible specific ip deny everything at the bottom of this one. As soon as you have applied it, it allowed your DMZ inside because you put it in the acl, but you did not reference for your dmz be allowed outside, what is needed now that you have a list of access applied to your dmz interface. Your static and Nat seems good, just make the changes to your dmz acl to allow the incoming connection and the connection outdoors. Take note of this source for your ACLs on dmz will be your dmz hosts and destination will be on the outside.

  • How to download files from the database file system.

    Hello everyone.

    I m trying to do a procedure to download a PDF file that is stored in the file system of the server of the database and not inside the database. The established procedure is the following:


    create or replace
    PROCEDURE PRT_PR_DOWNLOAD_FICH (v_file_name VARCHAR2
    )

    AS

    V_LENGTH number;
    Lob_loc Bfile;

    BEGIN


    Lob_loc: = bfilename ('DIR_OBJ', v_file_name);
    V_LENGTH: = dbms_lob.getlength (Lob_loc);

    owa_util.mime_header ("application/octet ', False");
    HTP.p ("Content-length: ' |") v_length);
    HTP.p ('Content-Disposition: attachment; filename = "" | ") SUBSTR (v_file_name, INSTR (v_file_name, ' /') + 1) | '"');
    owa_util.http_header_close;
    wpg_docload.download_file (Lob_loc);


    END PRT_PR_DOWNLOAD_FICH;


    This procedure receive the name of the file to download and use the wpg_docload.download_file () function. The DIR_OBJ is a directory with path from the server to the folder that contains the files I want to download.

    When I run this procedure I get the error: "Internal Server Error".

    Can someone tell me what I am doing wrong and if it is the best way to download a file directly from the database server file system?

    Hello Pedro,

    Just out of curiosity, I tried your example ;-) It works very well in my environment! (Oracle 10g with OSH and Apex 3.1.2
    But: I had to grant READ permissions on my directory object to APEX_PUBLIC_USER!

    (1) I created a "test.txt" document in the directory corresponding with my EXPDIR directory object. 'Oracle' user needs read on the file & document permissions!

    (2) give APEX_PUBLIC_USER necessary READ rights on the directory object:

    grant read on the directory expdir to apex_public_user;

    (3) create the procedure:

    CREATE OR REPLACE PROCEDURE MATTHIASH. PRT_PR_DOWNLOAD_FICH (v_file_name VARCHAR2)
    AS
    V_LENGTH number;
    Lob_loc Bfile;
    BEGIN
    Lob_loc: = bfilename ('EXPDIR', v_file_name);
    V_LENGTH: = dbms_lob.getlength (Lob_loc);

    owa_util.mime_header ("application/octet ', False");
    HTP.p ("Content-length: ' |") v_length);
    HTP.p ('Content-Disposition: attachment; filename = "" | ") SUBSTR (v_file_name, INSTR (v_file_name, ' /') + 1) | '"');
    owa_util.http_header_close;
    wpg_docload.download_file (Lob_loc);

    EXCEPTION
    WHILE OTHERS THEN
    HTP.p (substr (dbms_utility.format_error_stack (): dbms_utility.format_error_backtrace (), 1, 4000));
    END PRT_PR_DOWNLOAD_FICH;
    /

    (4) Grant execute rights on APEX_PUBLIC_USER of this procedure:

    GRANT EXECUTE ON MATTHIASH. PRT_PR_DOWNLOAD_FICH TO APEX_PUBLIC_USER;

    (5) Finally, try if download document works well:

    http://: 7777, pls, apex, MATTHIASH. PRT_PR_DOWNLOAD_FICH? v_file_name = test.txt

    I would like to know if it works!

    HTH
    Matthias

  • APEX ORACLE INSTALLED IN THE DATABASE OF ORACLE EBS (CANNOT DOWNLOAD APPLICATION)

    Hi friends,

    I have install apex oracle inside the database from oracle ebs on redhat linux 6,-@apexins apex apex temp1 using's script.

    The installation was successful, I created my work space, but when I try to download my application exported in it, at the time when I click on the download link

    path becomes empty.

    Use apex 4.1.1.00.23

    Please I need assistance on this issue.

    After a long search for a solution, I finally found the solution. It is problem of Glassfish 3.1.2

    Solution was obtained from Mathias Hoy's blog.

    file upload | Matthias Hoys

    I downloaded the web-Core, to replace it with the inside glassfish in the folder modules and it work similar magic

  • What is the "best way" to see all the 'hooks' that affect the database?

    Hi all

    I'm responsible for exporting all schemas using the data pump and then re - import the scehmas, yet once so we can reorganize the real table spaces.

    I know that this can be done using grid 12 c, but I'm not sure I want to use this feature for this task.

    Anyone who has used the feature of grids to 'keep the tables' and then re - organize them while they are still online?

    I'll have to finally make it to the PROD database and I am concerned about the "break" out of jobs, items, ect, ect.

    What is the "best way" to do a proper verification of all database objects and or work, that the export/import might pipe upward?

    As I did for example, a simple count on all objects and of course excludes "SYS and SYSTEM" and the County was in close 60 000 objects.

    How do I know all 'hooks' that are inside the database? What is the way that do you?

    Thank you

    Lady Allora.

    Hi, Justin.

    I think that's what I'm going the way of...

    Select os_username, username, OWNER, dba_audit_trail SQL_TEXT

    where rownum<>

    where username <> 'SYSTEM '.

    and also have different variations all asking questions them the same point of view...

    Modes of verification do you find useful?

    Also I'm using something like this as well.

    Select "check standard", sessionid,

    proxy_sessionid statementid, entryid, extended_timestamp, global_uid,

    username, client_id, null, os_username, userhost, os_process, terminal,

    instance_number, owner, obj_name, null, new_owner,

    new_name, action, action_name, audit_option, transactionid, returncode,

    SNA, comment_text, sql_bind, sql_text,

    obj_privilege, sys_privilege, admin_option, dealer, priv_used,.

    ses_actions, logoff_time, logoff_lread, logoff_pread, logoff_lwrite,

    logoff_dlock, session_cpu

    Of

    dba_audit_trail

    where rownum<>

    order extended_timestamp;

    Thank you

    Lady Allora.

  • CKPTQ in the database buffer cache and LRU

    Hi experts


    This feature can settle in cache buffers data base Oracle 10.2 or higher.
    Forums of sources: OTN and 11.2 Concepts guide

    According to my readings. To improve the functionality and make it more good American cache database is divided into several zones which are called workareasNow more

    Zoom this each activities will store multiple lists to store tampons inside the database buffer cache.

    Each wrokarea can have one or more then one lists to keep the wrokordering in there. The list of what each activity will have therefore to list LRU and list CKPTQ. LRU list

    is a list of buffers pinned, free and sales and CKPTQ is a list of stamp Sales. We can say THAT CKPTQ is a group of stamps Sales ordering of RBA weak and ready to be flushed from the cache on the disk.

    CKPTQ list is maintained by ordering of low RBE.
    As novice let me clearly low RBA and RBA senior first

    RBA is stored in the header of the block and we will give the information on which this block is spent and how many times it is changed.

    Low RBE: low RBE is the address to redo the first change that was applied to the block since his own last.
    RBA high: the high RBA is the address to redo the last change has been applied to the block.

    Now back to CKPTQ
    It can be like this (pathetic CKPTQ diagram)

    lowRBA = high RBA
    (Head of the CKPTQ)                         (CKPTQ line)

    CKPTQ is a list of stamp Sales. According to the concept of the RBA. The most recent modified buffer is at the tail of CKPTQ.

    Now the oracle process starts and try to get the DB cache buffer if she gets a buffer it will put an end SRM to the list.and buffer buffer LRU will become the most

    recently used.

    Now, if the process cannot find a necessary buffer.then first, he will try to find free tampons to LRU. If he finds his most he will place a datablock to the data file in the

    place where free buffer was sitting. (Good enough).

    Now, if the process cant fnd a buffer without LRU then first step would be he will find some Sales swabs at the end of the LRU to LRU list and place them on a

    CKPTQ (do not forget in the low order of RBA he organize it queue of CKPT). and now the oracle process will buffer required and place it on the end of the MRU of LRU list. (Because space was acclaimed by the displacement of Sales to CKPTQ buffers).

    I do not know of CKPTQ buffers (to be more precise tampon Sales) will move to datafiles.all buffers are line up n lower CKPTQ RBA way first. But

    emptied to datafile how and in what way and to what event?

    That's what I understand after these last three days, flipping through the blogs, forums and concepts guide. Now miss me you please erase me on and off it

    I can't bind the following features at this rate... It's

    (1) how the work of additional checkpoint with this CKPTQ?

    (2) now, what is this 3 second delay?

    (Every 3 seconds DBWR process will wake and find if nothing to write about the data files for this DBWR will check only CKPTQ).

    Apartment 3) form 3 second funda, when CKPTQ buffers will be moved? (IS IT when the process is unable to find any space in CKPTQ to keep buffers LRU. Its a

    moment where CKPTQ buffer will be moved on the disk)

    (4) can you please report when the control file will be updated with checkpoint so it can reduce recovery time?

    In many ques but I'm trying to build the entire process in mind that its operation may be I can be wrong in any phase in any stage, please correct me upward and

    Take me @ the end of the flow.


    Thank you
    Philippe

    Hi Aman,

    Yes, I a soft copy of ppt or white paper "Harald van Breederode" of 2009.

    -Pavan Kumar N

Maybe you are looking for