Oracle TNS 314 协议分析：二、基础包结构

r囧r小猫 2023-03-12 12:30 84阅读 0赞

# **TNS包头格式** #

每个数据都包含一个通用包头，包含数据的长度、校验和解析信息

<table> 
 <tbody> 
 <tr> 
 <td style="width:360px;"> Packet Header </td> 
 <td style="width:69px;"> 8 </td> 
 <td style="width:469px;"> 通用包头 </td> 
 </tr> 
 <tr> 
 <td style="width:360px;"> Data </td> 
 <td style="width:69px;"> 可变 </td> 
 <td style="width:469px;"> 数据 </td> 
 </tr> 
 </tbody> 
</table>

Packet Header

<table> 
 <tbody> 
 <tr> 
 <td> Length </td> 
 <td> 2 </td> 
 <td> 包的长度，包括通用包头 </td> 
 </tr> 
 <tr> 
 <td> Packet check sum </td> 
 <td> 2 </td> 
 <td> 包的校验和 </td> 
 </tr> 
 <tr> 
 <td> PacketType </td> 
 <td> 1 </td> 
 <td> 包类型 </td> 
 </tr> 
 <tr> 
 <td> Reserved </td> 
 <td> 1 </td> 
 <td> 保留 </td> 
 </tr> 
 <tr> 
 <td> Header check sum </td> 
 <td> 2 </td> 
 <td> 通用头的校验和 </td> 
 </tr> 
 </tbody> 
</table>

Packet Types

<table> 
 <tbody> 
 <tr> 
 <td>CONNECT &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td> 
 <td>1</td> 
 <td>连接</td> 
 </tr> 
 <tr> 
 <td>ACCEPT&nbsp; &nbsp;&nbsp;</td> 
 <td>2</td> 
 <td>连接接受</td> 
 </tr> 
 <tr> 
 <td>ACK&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>3</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>REFUSE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</td> 
 <td>4</td> 
 <td>拒绝连接</td> 
 </tr> 
 <tr> 
 <td>REDIRECT&nbsp; &nbsp; &nbsp; &nbsp;</td> 
 <td>5</td> 
 <td>重定向</td> 
 </tr> 
 <tr> 
 <td>DATA&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>6</td> 
 <td>数据包，大多数包属于此包，包含SQL命令及返回等</td> 
 </tr> 
 <tr> 
 <td>NULL DATA</td> 
 <td>7</td> 
 <td>空</td> 
 </tr> 
 <tr> 
 <td>ABORT&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>9</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>RESEND&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>11</td> 
 <td>重发</td> 
 </tr> 
 <tr> 
 <td>MARKER&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</td> 
 <td>12</td> 
 <td>提示错误等</td> 
 </tr> 
 <tr> 
 <td>ATTENTION&nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>13</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>CONTROL&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</td> 
 <td>14</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>MAX&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</td> 
 <td>19</td> 
 <td>&nbsp;</td> 
 </tr> 
 </tbody> 
</table>

## **通用包头解析示例** ##

![20200508174456706.png][]

## 通用包头解析代码示例 ##

local pktLen=string.unpack(">I2",lengthdata)
    local data,err=reqsock:receive(pktLen-2)
    if(err) then 
          ngx.log(ngx.ERR,"err when reading packet")
          break 
    end
    ngx.log(ngx.DEBUG,"data"..data:hex())
    local pktType=string.unpack(">B",data,3)

# PacketType 0x06 Data包格式 #

客户端与服务端除建立和断开连接外，基本上全部使用Data包进行交互，包括设置协议参数、认证、SQL请求与返回等，此包内部又有很多类型和子类型，不同类型和子类型差异较大，基础格式如下

<table> 
 <tbody> 
 <tr> 
 <td> Data flag </td> 
 <td> 2 </td> 
 <td> 状态 </td> 
 </tr> 
 <tr> 
 <td> Command packet </td> 
 <td> 可变 </td> 
 <td> 命令包 </td> 
 </tr> 
 <tr> 
 <td> … </td> 
 <td> … </td> 
 <td> … </td> 
 </tr> 
 <tr> 
 <td> Command packet </td> 
 <td> 可变 </td> 
 <td> 命令包 </td> 
 </tr> 
 </tbody> 
</table>

**DataFlag**

DataFlag一般为0x0000,DATA结束时为0x0040,其他情况少见，详细见下表

<table> 
 <tbody> 
 <tr> 
 <td style="width:502px;"> Send token </td> 
 <td style="width:173px;"> 0x0001 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Request Confirmation </td> 
 <td style="width:173px;"> 0x0002 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Confirmation </td> 
 <td style="width:173px;"> 0x0004 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Reserved </td> 
 <td style="width:173px;"> 0x0008 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> UNKNOWN </td> 
 <td style="width:173px;"> 0x0010 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> More Data to Come </td> 
 <td style="width:173px;"> 0x0020 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> End of File </td> 
 <td style="width:173px;"> 0x0040 </td> 
 <td style="width:223px;"> data传输结束时可见 </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Do Immediate Confirmation </td> 
 <td style="width:173px;"> 0x0080 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Request to send </td> 
 <td style="width:173px;"> 0x0100 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:502px;"> Request Nt Trailer </td> 
 <td style="width:173px;"> 0x0200 </td> 
 <td style="width:223px;"> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

## **Command Packet** ##

Command Packet可以有多个，每个CommandPacket也有自己的类型DataID，有的DataID还有自己的子功能号叫做CallID，DataID类型除特殊的SetProtocol和Network等包外，一般请求包包含一个序号字节，而返回值没有这个序号

<table> 
 <tbody> 
 <tr> 
 <td style="width:205px;"> DataID </td> 
 <td style="width:99px;"> 1 </td> 
 <td style="width:595px;"> Command&nbsp;功能 </td> 
 </tr> 
 <tr> 
 <td style="width:205px;"> CallID </td> 
 <td style="width:99px;"> 1 </td> 
 <td style="width:595px;"> 子功能，此字段可选，有些DataID无CallID </td> 
 </tr> 
 <tr> 
 <td style="width:205px;"> Seq </td> 
 <td style="width:99px;"> 1 </td> 
 <td style="width:595px;"> 序号（返回包无此序列号） </td> 
 </tr> 
 </tbody> 
</table>

### **DataID** ###

<table> 
 <tbody> 
 <tr> 
 <td>SET_PROTOCOL</td> 
 <td>1</td> 
 <td>连接后设置协议参数</td> 
 </tr> 
 <tr> 
 <td>SET_DATATYPES</td> 
 <td>2</td> 
 <td>连接后设置数据格式等</td> 
 </tr> 
 <tr> 
 <td>USER_OCI_FUNC</td> 
 <td>3</td> 
 <td>调用OCI函数，有子类型，传输sql命令等用此</td> 
 </tr> 
 <tr> 
 <td>RETURN_STATUS</td> 
 <td>4</td> 
 <td>返回状态，也有子命令</td> 
 </tr> 
 <tr> 
 <td>ACCESS_USR_ADDR</td> 
 <td>5</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>ROW_TRANSF_HEADER</td> 
 <td>6</td> 
 <td>SQL命令返回具体数据</td> 
 </tr> 
 <tr> 
 <td>ROW_TRANSF_DATA</td> 
 <td>7</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>RETURN_OPI_PARAM&nbsp;</td> 
 <td>8</td> 
 <td>常见不需要返回数据的命令请求返回如Insert，后续OCI_RESPOND</td> 
 </tr> 
 <tr> 
 <td>FUNCCOMPLETE</td> 
 <td>9</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>NERROR_RET_DEF</td> 
 <td>10</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>IOVEC_4FAST_UPI</td> 
 <td>11</td> 
 <td>常见不需要返回数据的命令请求返回，后续OCI_RESPOND</td> 
 </tr> 
 <tr> 
 <td>LONG_4FAST_UPI</td> 
 <td>12</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>INVOKE_USER_CB</td> 
 <td>13</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>LOB_FILE_DF</td> 
 <td>14</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>WARNING</td> 
 <td>15</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>DESCRIBE_INFO</td> 
 <td>16</td> 
 <td>常见在sql请求后返回一些描述信息，比如列名</td> 
 </tr> 
 <tr> 
 <td>PIGGYBACK_FUNC</td> 
 <td>17</td> 
 <td>有子命令，常后续OCI_FUN_CALL，后续OCI_FUN_CALL携带真实命令</td> 
 </tr> 
 <tr> 
 <td>SIG_4UCS</td> 
 <td>18</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>FLUSH_BIND_DATA</td> 
 <td>19</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>OCI_RESPOND</td> 
 <td>23</td> 
 <td>一般用于返回信息，基本所有USER_OCI_FUNC的返回都会包含此包,此包最后一般有服务端返回客户端的文字消息，（312协议未见）</td> 
 </tr> 
 <tr> 
 <td>SNS</td> 
 <td>0xdeadbeef</td> 
 <td>额外安全网络协议交换</td> 
 </tr> 
 <tr> 
 <td>XTRN_PROCSERV_R1</td> 
 <td>32</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td>XTRN_PROCSERV_R2</td> 
 <td>68</td> 
 <td>&nbsp;</td> 
 </tr> 
 </tbody> 
</table>

### **USER\_OCI\_FUNC** ###

DataID 为3时为USER\_OCI\_FUNC，SQL的执行基本是通过此命令完成，此命令有子命令，具体取值如下（参见wireshark tns desector）

<table> 
 <tbody> 
 <tr> 
 <td> 1 </td> 
 <td> &nbsp;Logon to Oracle </td> 
 <td> 41 </td> 
 <td> &nbsp;Parse for syntax and SQL Dictionary lookup </td> 
 <td> 81 </td> 
 <td> &nbsp;2nd Half of Logon </td> 
 </tr> 
 <tr> 
 <td> 2 </td> 
 <td> &nbsp;Open Cursor </td> 
 <td> 42 </td> 
 <td> &nbsp;Continue serving after EOF </td> 
 <td> 82 </td> 
 <td> &nbsp;1st Half of Logon </td> 
 </tr> 
 <tr> 
 <td> 3 </td> 
 <td> &nbsp;Parse a Row </td> 
 <td> 43 </td> 
 <td> &nbsp;Array describe </td> 
 <td> 83 </td> 
 <td> &nbsp;Do Streaming Operation </td> 
 </tr> 
 <tr> 
 <td> 4 </td> 
 <td> &nbsp;Execute a Row </td> 
 <td> 44 </td> 
 <td> &nbsp;Init sys pars command table </td> 
 <td> 84 </td> 
 <td> &nbsp;Open Session (71 interface) </td> 
 </tr> 
 <tr> 
 <td> 5 </td> 
 <td> &nbsp;Fetch a Row </td> 
 <td> 45 </td> 
 <td> &nbsp;Finalize sys pars command table </td> 
 <td> 85 </td> 
 <td> &nbsp;X/Open XA operations (71 interface) </td> 
 </tr> 
 <tr> 
 <td> 8 </td> 
 <td> &nbsp;Close Cursor </td> 
 <td> 46 </td> 
 <td> &nbsp;Put sys par in command table </td> 
 <td> 86 </td> 
 <td> &nbsp;Debugging operations </td> 
 </tr> 
 <tr> 
 <td> 9 </td> 
 <td> &nbsp;Logoff of Oracle </td> 
 <td> 47 </td> 
 <td> &nbsp;Get sys pars from command table </td> 
 <td> 87 </td> 
 <td> &nbsp;Special debugging operations </td> 
 </tr> 
 <tr> 
 <td> 10 </td> 
 <td> &nbsp;Describe a select list column </td> 
 <td> 48 </td> 
 <td> &nbsp;Start Oracle (V6) </td> 
 <td> 88 </td> 
 <td> &nbsp;XA Start </td> 
 </tr> 
 <tr> 
 <td> 11 </td> 
 <td> &nbsp;Define where the column goes </td> 
 <td> 49 </td> 
 <td> &nbsp;Shutdown Oracle (V6) </td> 
 <td> 89 </td> 
 <td> &nbsp;XA Switch and Commit </td> 
 </tr> 
 <tr> 
 <td> 12 </td> 
 <td> &nbsp;Auto commit on </td> 
 <td> 50 </td> 
 <td> &nbsp;Run Independent Process (V6) </td> 
 <td> 90 </td> 
 <td> &nbsp;Direct copy from db buffers to client address </td> 
 </tr> 
 <tr> 
 <td> 13 </td> 
 <td> &nbsp;Auto commit off </td> 
 <td> 51 </td> 
 <td> &nbsp;Test RAM (V6) </td> 
 <td> 91 </td> 
 <td> &nbsp;OKOD Call (In Oracle &lt;= 7 this used to be Connect </td> 
 </tr> 
 <tr> 
 <td> 14 </td> 
 <td> &nbsp;Commit </td> 
 <td> 52 </td> 
 <td> &nbsp;Archive operation (V6) </td> 
 <td> 93 </td> 
 <td> &nbsp;RPI Callback with ctxdef </td> 
 </tr> 
 <tr> 
 <td> 15 </td> 
 <td> &nbsp;Rollback </td> 
 <td> 53 </td> 
 <td> &nbsp;Media Recovery - start (V6) </td> 
 <td> 94 </td> 
 <td> &nbsp;Bundled execution call (V7) </td> 
 </tr> 
 <tr> 
 <td> 16 </td> 
 <td> &nbsp;Set fatal error options </td> 
 <td> 54 </td> 
 <td> &nbsp;Media Recovery - record tablespace to recover (V6) </td> 
 <td> 95 </td> 
 <td> &nbsp;Do Streaming Operation without begintxn </td> 
 </tr> 
 <tr> 
 <td> 17 </td> 
 <td> &nbsp;Resume current operation </td> 
 <td> 55 </td> 
 <td> &nbsp;Media Recovery - get starting log seq # (V6) </td> 
 <td> 96 </td> 
 <td> &nbsp;LOB and FILE related calls </td> 
 </tr> 
 <tr> 
 <td> 18 </td> 
 <td> &nbsp;Get Oracle version-date string </td> 
 <td> 56 </td> 
 <td> &nbsp;Media Recovery - recover using offline log (V6) </td> 
 <td> 97 </td> 
 <td> &nbsp;File Create call </td> 
 </tr> 
 <tr> 
 <td> 19 </td> 
 <td> &nbsp;Until we get rid of OASQL </td> 
 <td> 57 </td> 
 <td> &nbsp;Media Recovery - cancel media recovery (V6) </td> 
 <td> 98 </td> 
 <td> &nbsp;Describe query (V8) call </td> 
 </tr> 
 <tr> 
 <td> 20 </td> 
 <td> &nbsp;Cancel the current operation </td> 
 <td> 58 </td> 
 <td> &nbsp;Logon to Oracle (V6) </td> 
 <td> 99 </td> 
 <td> &nbsp;Connect (non-blocking attach host) </td> 
 </tr> 
 <tr> 
 <td> 21 </td> 
 <td> &nbsp;Get error message </td> 
 <td> 59 </td> 
 <td> &nbsp;Get Oracle version-date string in new format </td> 
 <td> 100 </td> 
 <td> &nbsp;Open a recursive cursor </td> 
 </tr> 
 <tr> 
 <td> 22 </td> 
 <td> &nbsp;Exit Oracle command </td> 
 <td> 60 </td> 
 <td> &nbsp;Initialize Oracle </td> 
 <td> 101 </td> 
 <td> &nbsp;Bundled KPR Execution </td> 
 </tr> 
 <tr> 
 <td> 23 </td> 
 <td> &nbsp;Special function </td> 
 <td> 61 </td> 
 <td> &nbsp;Reserved for MAC; close all cursors </td> 
 <td> 102 </td> 
 <td> &nbsp;Bundled PL/SQL execution </td> 
 </tr> 
 <tr> 
 <td> 24 </td> 
 <td> &nbsp;Abort </td> 
 <td> 62 </td> 
 <td> &nbsp;Bundled execution call </td> 
 <td> 103 </td> 
 <td> &nbsp;Transaction start attach detach </td> 
 </tr> 
 <tr> 
 <td> 25 </td> 
 <td> &nbsp;Dequeue by RowID </td> 
 <td> 65 </td> 
 <td> &nbsp;For direct loader: functions </td> 
 <td> 104 </td> 
 <td> &nbsp;Transaction commit rollback recover </td> 
 </tr> 
 <tr> 
 <td> 26 </td> 
 <td> &nbsp;Fetch a long column value </td> 
 <td> 66 </td> 
 <td> &nbsp;For direct loader: buffer transfer </td> 
 <td> 105 </td> 
 <td> &nbsp;Cursor close all </td> 
 </tr> 
 <tr> 
 <td> 27 </td> 
 <td> &nbsp;Create Access Module </td> 
 <td> 67 </td> 
 <td> &nbsp;Distrib. trans. mgr. RPC </td> 
 <td> 106 </td> 
 <td> &nbsp;Failover into piggyback </td> 
 </tr> 
 <tr> 
 <td> 28 </td> 
 <td> &nbsp;Save Access Module Statement </td> 
 <td> 68 </td> 
 <td> &nbsp;Describe indexes for distributed query </td> 
 <td> 107 </td> 
 <td> &nbsp;Session switching piggyback (V8) </td> 
 </tr> 
 <tr> 
 <td> 29 </td> 
 <td> &nbsp;Save Access Module </td> 
 <td> 69 </td> 
 <td> &nbsp;Session operations </td> 
 <td> 108 </td> 
 <td> &nbsp;Do Dummy Defines </td> 
 </tr> 
 <tr> 
 <td> 30 </td> 
 <td> &nbsp;Parse Access Module Statement </td> 
 <td> 70 </td> 
 <td> &nbsp;Execute using synchronized system commit numbers </td> 
 <td> 109 </td> 
 <td> &nbsp;Init sys pars (V8) </td> 
 </tr> 
 <tr> 
 <td> 31 </td> 
 <td> &nbsp;How many items? </td> 
 <td> 71 </td> 
 <td> &nbsp;Fast UPI calls to OPIAL7 </td> 
 <td> 110 </td> 
 <td> &nbsp;Finalize sys pars (V8) </td> 
 </tr> 
 <tr> 
 <td> 32 </td> 
 <td> &nbsp;Initialize Oracle </td> 
 <td> 72 </td> 
 <td> &nbsp;Long Fetch (V7) </td> 
 <td> 111 </td> 
 <td> &nbsp;Put sys par in par space (V8) </td> 
 </tr> 
 <tr> 
 <td> 33 </td> 
 <td> &nbsp;Change User ID </td> 
 <td> 73 </td> 
 <td> &nbsp;Call OPIEXE from OPIALL: no two-task access </td> 
 <td> 112 </td> 
 <td> &nbsp;Terminate sys pars (V8) </td> 
 </tr> 
 <tr> 
 <td> 34 </td> 
 <td> &nbsp;Bind by reference positional </td> 
 <td> 74 </td> 
 <td> &nbsp;Parse Call (V7) to deal with various flavours </td> 
 <td> 114 </td> 
 <td> &nbsp;Init Untrusted Callbacks </td> 
 </tr> 
 <tr> 
 <td> 35 </td> 
 <td> &nbsp;Get n'th Bind Variable </td> 
 <td> 76 </td> 
 <td> &nbsp;RPC call from PL/SQL </td> 
 <td> 115 </td> 
 <td> &nbsp;Generic authentication call </td> 
 </tr> 
 <tr> 
 <td> 36 </td> 
 <td> &nbsp;Get n'th Into Variable </td> 
 <td> 77 </td> 
 <td> &nbsp;Do a KGL operation </td> 
 <td> 116 </td> 
 <td> &nbsp;FailOver Get Instance call </td> 
 </tr> 
 <tr> 
 <td> 37 </td> 
 <td> &nbsp;Bind by reference </td> 
 <td> 78 </td> 
 <td> &nbsp;Execute and Fetch </td> 
 <td> 117 </td> 
 <td> &nbsp;Oracle Transaction service Commit remote sites </td> 
 </tr> 
 <tr> 
 <td> 38 </td> 
 <td> &nbsp;Bind by reference numeric </td> 
 <td> 79 </td> 
 <td> &nbsp;X/Open XA operation </td> 
 <td> 118 </td> 
 <td> &nbsp;Get the session key </td> 
 </tr> 
 <tr> 
 <td> 39 </td> 
 <td> &nbsp;Parse and Execute </td> 
 <td> 80 </td> 
 <td> &nbsp;New KGL operation call </td> 
 <td> 119 </td> 
 <td> &nbsp;Describe any (V8) </td> 
 </tr> 
 <tr> 
 <td> 40 </td> 
 <td> &nbsp;Parse for syntax (only) </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> 120 </td> 
 <td> &nbsp;Cancel All </td> 
 </tr> 
 </tbody> 
</table>

### 其他一些DataID 与CallID组合（摘抄自《**ORACLE协议分析**》[https://download.csdn.net/download/hg\_zhoujj/10789649][https_download.csdn.net_download_hg_zhoujj_10789649]） ###

<table> 
 <tbody> 
 <tr> 
 <td> DataID </td> 
 <td> CalID </td> 
 <td> 类型 </td> 
 <td> 说明 </td> 
 <td> 使用 </td> 
 </tr> 
 <tr> 
 <td> 0x01 </td> 
 <td> 0x05 </td> 
 <td> 请求 </td> 
 <td> CLIENT&nbsp;TYPE </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x01 </td> 
 <td> 0x06 </td> 
 <td> &nbsp; </td> 
 <td> Set Protocol </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x01 </td> 
 <td> 0x2c </td> 
 <td> &nbsp; </td> 
 <td> IDENT </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x02 </td> 
 <td> 0x00 </td> 
 <td> &nbsp; </td> 
 <td> RESET </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x02 </td> 
 <td> 0x01 </td> 
 <td> &nbsp; </td> 
 <td> CHAR_MAP </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x02 </td> 
 <td> 0x54 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x01 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x02 </td> 
 <td> &nbsp; </td> 
 <td> SQL_OPEN </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x03 </td> 
 <td> &nbsp; </td> 
 <td> QUERY </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x04 </td> 
 <td> &nbsp; </td> 
 <td> QUERY SECOND </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x05 </td> 
 <td> &nbsp; </td> 
 <td> FETCH MORE </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x08 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x09 </td> 
 <td> &nbsp; </td> 
 <td> DISCONNECT </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x0E </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x27 </td> 
 <td> &nbsp; </td> 
 <td> SET_LANG </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x2B </td> 
 <td> &nbsp; </td> 
 <td> DESC_COLS </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x3B </td> 
 <td> &nbsp; </td> 
 <td> DB VERSION </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x47 </td> 
 <td> &nbsp; </td> 
 <td> FETCH </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x51 </td> 
 <td> &nbsp; </td> 
 <td> Set password </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x52 </td> 
 <td> &nbsp; </td> 
 <td> Set user </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x54 </td> 
 <td> &nbsp; </td> 
 <td> HANDSHAKE4 </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x5E </td> 
 <td> &nbsp; </td> 
 <td> SQL </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x73 </td> 
 <td> &nbsp; </td> 
 <td> AUTH2 </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x76 </td> 
 <td> &nbsp; </td> 
 <td> AUTH1 </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x03 </td> 
 <td> 0x77 </td> 
 <td> &nbsp; </td> 
 <td> 查询表结构信息 </td> 
 <td> DESC </td> 
 </tr> 
 <tr> 
 <td> 0x04 </td> 
 <td> 0x01 </td> 
 <td> &nbsp; </td> 
 <td> ACK </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x04 </td> 
 <td> 0x02 </td> 
 <td> &nbsp; </td> 
 <td> ACK </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x04 </td> 
 <td> 0x05 </td> 
 <td> &nbsp; </td> 
 <td> ACK </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x06 </td> 
 <td> 0x00 </td> 
 <td> &nbsp; </td> 
 <td> More Row Result Info </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x06 </td> 
 <td> 0x01 </td> 
 <td> &nbsp; </td> 
 <td> First Row Result Info </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x08 </td> 
 <td> 0x01 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x08 </td> 
 <td> 0x05 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x08 </td> 
 <td> 0x08 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x08 </td> 
 <td> 0x9c </td> 
 <td> &nbsp; </td> 
 <td> Db version </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x10 </td> 
 <td> 0x19 </td> 
 <td> &nbsp; </td> 
 <td> Field Info </td> 
 <td> SELEC返回 </td> 
 </tr> 
 <tr> 
 <td> 0x11 </td> 
 <td> 0x69 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x11 </td> 
 <td> 0x6b </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 0x11 </td> 
 <td> 0x78 </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 <td> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

## Data包中常见的数据结构及解析 ##

### **变长****字符串** ###

变长字符串用一个前序一个字节长度标志的序列来表示

<table> 
 <tbody> 
 <tr> 
 <td> Data &nbsp;Length </td> 
 <td> 1 </td> 
 <td> 返回列数 </td> 
 </tr> 
 <tr> 
 <td> Data </td> 
 <td> Data &nbsp;Length </td> 
 <td> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

比如：

05 73 63 6f 74 74

05标识字符串长度

后面的字符串内容为ASCII码，表示scott

### **变长字符串数组** ###

变长字符串数字开头为fe，具体格式如下

<table> 
 <tbody> 
 <tr> 
 <td style="width:328px;"> Big Data Identify </td> 
 <td style="width:334px;"> 1 </td> 
 <td style="width:236px;"> 0xfe </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> Data &nbsp;Length </td> 
 <td style="width:334px;"> 1 </td> 
 <td style="width:236px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> Data </td> 
 <td style="width:334px;"> Data &nbsp;Length </td> 
 <td style="width:236px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> … </td> 
 <td style="width:334px;"> … </td> 
 <td style="width:236px;"> … </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> Data &nbsp;Length </td> 
 <td style="width:334px;"> 1 </td> 
 <td style="width:236px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> Data </td> 
 <td style="width:334px;"> Data &nbsp;Length </td> 
 <td style="width:236px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td style="width:328px;"> End Mark </td> 
 <td style="width:334px;"> 1 </td> 
 <td style="width:236px;"> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

**示例**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3lpemh1MjAwMA_size_16_color_FFFFFF_t_70][]

### **数字格式（参《ORACLE协议分析》未完全验证）** ###

**正数**

<table> 
 <tbody> 
 <tr> 
 <td> Id </td> 
 <td> 1 </td> 
 <td> C0+整数部分长度 </td> 
 </tr> 
 <tr> 
 <td> 整数部分 </td> 
 <td> Intlength=Id-c0 </td> 
 <td> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 小数部分 </td> 
 <td> DecLength=length-intlength-1 </td> 
 <td> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

注：

1.  数据的第一位标志整数部分长度
2.  整数部分长度+小数部分长度=数据总长度-1
3.  整数部分从后向前每两位（代表0到100）用一个字节（十六进制）表示，且为十六进制值-1
4.  小数部分从后向前每两位（代表0到100）用一个字节（十六进制）表示，且为十六进制值-1
5.  如果没有小数部分，Intlength+1〉length（为数字长度），则后面有（Intlength+1-length）位（只传输位）值为0的数据没有传输

**负数**

<table> 
 <tbody> 
 <tr> 
 <td> Id </td> 
 <td style="width:449px;"> 1 </td> 
 <td style="width:285px;"> 3f-整数部分长度 </td> 
 </tr> 
 <tr> 
 <td> 整数部分 </td> 
 <td style="width:449px;"> Intlength=3f-id </td> 
 <td style="width:285px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> 小数部分 </td> 
 <td style="width:449px;"> DecLength=length-intlength-1 </td> 
 <td style="width:285px;"> &nbsp; </td> 
 </tr> 
 <tr> 
 <td> Magic </td> 
 <td style="width:449px;"> 1 </td> 
 <td style="width:285px;"> 0x66 </td> 
 </tr> 
 </tbody> 
</table>

1.  数据的第一位标志整数部分长度
2.  整数部分长度+小数部分长度=数据总长度-2
3.  整数部分从后向前每两位（代表0到100）用一个字节（十六进制）表示，且为101-十六进制值
4.  小数部分从后向前每两位（代表0到100）用一个字节（十六进制）表示，且为101-十六进制值
5.  如果没有小数部分，Intlength+2〉length（为数字长度），则后面有（Intlength+2-length）位（只传输位）值为0的数据没有传输

### **日期格式（参《ORACLE协议分析》未完全验证）** ###

<table> 
 <tbody> 
 <tr> 
 <td style="width:114.9pt;"> Year1 </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Year1-100 </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Year2 </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Year2-100 </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Month </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Month </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Day </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Day </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Hour </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Hour-1 </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Minute </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Minute-1 </td> 
 </tr> 
 <tr> 
 <td style="width:114.9pt;"> Second </td> 
 <td style="width:65.7pt;"> 1 </td> 
 <td style="width:104.65pt;"> Second-1 </td> 
 </tr> 
 </tbody> 
</table>

注：

1.  Year1为年前两位，值为year1-100
2.  Year2为年后两位，值为year2-100
3.  Month为月，值为month
4.  Day为月，值为Day
5.  Hour为月，值为Hour-1
6.  Minute为月，值为Minute-1
7.  Second为月，值为Second-1

[20200508174456706.png]: /images/20230312/bef634c3a0824d769a736f8c0f616e29.png
[https_download.csdn.net_download_hg_zhoujj_10789649]: https://download.csdn.net/download/hg_zhoujj/10789649
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3lpemh1MjAwMA_size_16_color_FFFFFF_t_70]: /images/20230312/e7dd9b9dafb34e43a3e1b8cee4ad3e9f.png