Oracle10gR2 ORA-3136 错误解决

« Oracle10g v$database视图SCN增强 | Blog首页 | Oracle 11g将于何时推出? »

Oracle10gR2 ORA-3136 错误解决

作者：eygle |【转载时请以超链接形式标明文章出处和作者信息及本声明】
链接：http://www.eygle.com/archives/2006/07/sqlnet_inbound_connect_timeout.html

站内相关文章|Related Articles

Solaris安装Oracle10g之 libCstd.so.1 问题解决

鸡肋-ORACLE10g自动收集CBO统计信息

安装了Oracle10g 10.2.0.3 感受众多BUG

Oracle中独一无二的Cache对象

Oracle10g中过程(PROCEDURE )重建的增强

最近一台新上线的Oracle10gR2数据库在警告日志文件中(alert.log)持续出现如下错误:

Tue Jul 18 23:09:22 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:23 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:25 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:09:30 2006
WARNING: inbound connection timed out (ORA-3136)
Tue Jul 18 23:12:15 2006
WARNING: inbound connection timed out (ORA-3136)

同时在sqlnet.log中记录了如下错误:

Fatal NI connect error 12170.

VERSION INFORMATION:
TNS for Linux: Version 10.2.0.2.0 - Production
Oracle Bequeath NT Protocol Adapter for Linux: Version 10.2.0.2.0 - Production
TCP/IP NT Protocol Adapter for Linux: Version 10.2.0.2.0 - Production
Time: 19-JUL-2006 11:25:26
Tracing not turned on.
Tns error struct:
ns main err code: 12535
TNS-12535: TNS:operation timed out
ns secondary err code: 12606
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.123)(PORT=58147))

这是和网络连接相关的一个错误,Metalink上给出了如下的解决方案:

1.set INBOUND_CONNECT_TIMEOUT_<listenername>=0 in listener.ora
2. set SQLNET.INBOUND_CONNECT_TIMEOUT = 0 in sqlnet.ora of server.
3. stop and start both listener and database.
4. Now try to connect to DB and observe the behaviour

这里重起数据库和Listener我认为是没有必要的,我们reload一下Listner应该就可以了.

[oracle@order admin]$ lsnrctl

LSNRCTL for Linux: Version 10.2.0.2.0 - Production on 19-JUL-2006 15:26:33

Welcome to LSNRCTL, type "help" for information.

LSNRCTL> reload
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
The command completed successfully
LSNRCTL> services
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
Services Summary...
Service "order" has 2 instance(s).
Instance "order", status UNKNOWN, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Instance "order", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0 state:ready
LOCAL SERVER
The command completed successfully

LSNRCTL> show inbound_connect_timeout
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.9.11)(PORT=1521)))
LISTENER parameter "inbound_connect_timeout" set to 0
The command completed successfully
LSNRCTL> exit

修改之后,观察了一段时间,目前正常.

关于SQLNET.INBOUND_CONNECT_TIMEOUT参数,Oracle建议修改该参数,以避免denial-of-service攻击.

引用一段Oracle文档说明如下:

SQLNET.INBOUND_CONNECT_TIMEOUT
Purpose
Use the SQLNET.INBOUND_CONNECT_TIMEOUT parameter to specify the time, in seconds, for a client to connect with the database server and provide the necessary authentication information.

If the client fails to establish a connection and complete authentication in the time specified, then the database server terminates the connection. In addition, the database server logs the IP address of the client and an ORA-12170: TNS:Connect timeout occurred error message to the sqlnet.log file. The client receives either an ORA-12547: TNS:lost contact or an ORA-12637: Packet receive failed error message.

Without this parameter, a client connection to the database server can stay open indefinitely without authentication. Connections without authentication can introduce possible denial-of-service attacks, whereby malicious clients attempt to flood database servers with connect requests that consume resources.

To protect both the database server and the listener, Oracle Corporation recommends setting this parameter in combination with the INBOUND_CONNECT_TIMEOUT_listener_name parameter in the listener.ora file. When specifying values for these parameters, consider the following recommendations:

Set both parameters to an initial low value.
Set the value of the INBOUND_CONNECT_TIMEOUT_listener_name parameter to a lower value than the SQLNET.INBOUND_CONNECT_TIMEOUT parameter.
For example, you can set INBOUND_CONNECT_TIMEOUT_listener_name to 2 seconds and INBOUND_CONNECT_TIMEOUT parameter to 3 seconds. If clients are unable to complete connections within the specified time due to system or network delays that are normal for the particular environment, then increment the time as needed.

See Also:
Oracle9i Net Services Administrator's Guide for information about configuring these parameters

Default
None

Example
SQLNET.INBOUND_CONNECT_TIMEOUT=3

历史上的今天...
>> 2008-07-19文章:

Google Book上的Oracle图书

>> 2005-07-19文章:

瑞典游记-正章-第一个周末（游览市中心）

------
这篇【Oracle10gR2 ORA-3136 错误解决】来自 www.eygle.com | CSDN技术网摘| del.icio.us|365Key

By eygle on 2006-07-19 11:20 | Comments (4) | Posted to Oracle10g/11g | Edit |Pageviews:

相关文章	随机文章
Solaris安装Oracle10g之 libCstd.so.1 问题解决鸡肋-ORACLE10g自动收集CBO统计信息安装了Oracle10g 10.2.0.3 感受众多BUG Oracle中独一无二的Cache对象 Oracle10g中过程(PROCEDURE )重建的增强	在北京见到彩虹《循序渐进Oracle》在当当网上数据仓库常见名词浅释使用Bonnie++进行系统IO性能测试 Use RMAN to Manage BackupSet

搜索本站:

留言 (4)

ora-3136 错误能够导致数据库down 掉吗?
另外,磁盘的坏块和136 错误之间有什么关系吗?

我遇到的一个case 中3136错误导致数据库crash ,并且磁盘阵列同时也出现抱错信息.

Posted by: zhangyh at January 9, 2007 10:19 AM

这个错误一般不会导致数据库crash的。

你的详细日志如何记录的?

Posted by: eygle at January 9, 2007 10:26 AM

为什么会出现这种情况呢？
我出现这个问题的时候监听不能stop了，我只好kill -9 了。

Posted by: xiaomi_1006 at November 20, 2007 11:00 AM

INBOUND_CONNECT_TIMEOUT_=0
请问_是引用的参数吗？

另外，我TNSPING tnsname没问题
TELNET ip:port也没有问题
但用sqlplus 连接就出现ORA-03135
每次连接后sqlnet.log中都出现你所描述的错误，这个和以上的参数设置有关系吗？

Posted by: hz at June 17, 2008 1:57 AM

www.eygle.com

Oracle10gR2 ORA-3136 错误解决

留言 (4)

发表留言: