Table Records Deleted by anonymous user!
Table Records Deleted by anonymous user!
am 11.03.2011 08:14:35 von Vikram A
--0-1220820677-1299827675=:60317
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear Experts!
Our institution has a centralized MySQL ser=
ver which is accessed by several =0Aclients. Today we found that a particul=
ar table's records are missing. We could =0Asay that it is done intentional=
ly but could not point anyone because we did not =0Aenable the logging feat=
ure=A0in MySQL. I want to know whether it is possible to =0Afind the time o=
f the query execution and the user/node name=A0who executed it. All =0Athe =
data lost are very confidential and cannot be compromised. Kindly give me a=
=0Asolution to restore the lost data or the particulars=A0of the person wh=
o made =0Ait(intentionally).
Thank You.
Vikram
=0A
--0-1220820677-1299827675=:60317--
Re: Table Records Deleted by anonymous user!
am 11.03.2011 08:37:11 von Johan De Meersman
----- Original Message -----
> From: "Vikram A"
>
> say that it is done intentionally but could not point anyone because
> we did not enable the logging feature in MySQL.
You already said it yourself: you don't have logging enabled, so that data =
is not available.
If you have binary logs, you could comb through those for the delete statem=
ents; that'll at least give you a timeframe.
--
Bier met grenadyn
Is als mosterd by den wyn
Sy die't drinkt, is eene kwezel
Hy die't drinkt, is ras een ezel
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=3Dgcdmg-mysql-2@m.gmane.o rg
Re: Table Records Deleted by anonymous user!
am 11.03.2011 08:55:38 von Geoff Galitz
>> say that it is done intentionally but could not point anyone because
>> we did not enable the logging feature in MySQL.
>
> You already said it yourself: you don't have logging enabled, so that data
> is not available.
>
> If you have binary logs, you could comb through those for the delete
> statements; that'll at least give you a timeframe.
>
I would also go through the logs of whatever other entry vectors exist to
your database (apache, for example) for suspect looking statements or
logins. Also I'd check the history files such as .mysql_history and "last"
on the database server to look for anything suspicious.
Is it possible there is filesystem corruption which is actually responsible?
Take the server offline and run standard diagnostics such as fsck, perhaps.
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org
Re: Table Records Deleted by anonymous user!
am 11.03.2011 10:13:33 von Johan De Meersman
--=_96f22189-64b5-45d6-a22c-a4ebaca06ad6
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
> From: "Vikram A"
> Thank you for info. Now we enabled the logs. The DB administrator
> itself made a mistake that he restored the back up
This may be obvious, but keep your logs on separate disks if you can - full query logs take quite a bit of I/O away, so if you have them on the same disks as your data they may have a significant impact on performance.
--
Bier met grenadyn
Is als mosterd by den wyn
Sy die't drinkt, is eene kwezel
Hy die't drinkt, is ras een ezel
--=_96f22189-64b5-45d6-a22c-a4ebaca06ad6--
Re: Table Records Deleted by anonymous user!
am 11.03.2011 11:19:31 von Vikram A
--0-651191742-1299838771=:48259
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Sir,
Ok sir, thank you for your advise. We shall keep the logs in ano=
ther =0ADisk/Drive.
____________________________ ____=0AFro=
m: Johan De Meersman =0ATo: Vikram A
..in>=0ACc: MY SQL Mailing list =0ASent: Fri, 11 Marc=
h, 2011 2:43:33 PM=0ASubject: Re: Table Records Deleted by anonymous user!=
=0AFrom: "Vikram A" =0A>=0A>=0A>Thank you for i=
nfo. Now we enabled the logs. The DB administrator itself made a =0A>mistak=
e that he restored the back up=0A>=0AThis may be obvious, but keep your log=
s on separate disks if you can - full =0Aquery logs take quite a bit of I/O=
away, so if you have them on the same disks =0Aas your data they may have =
a significant impact on performance.
-- =0ABier met grenadyn=0AI=
s als mosterd by den wyn=0ASy die't drinkt, is eene kwezel=0AHy die't drink=
t, is ras een ezel
--0-651191742-1299838771=:48259--
Re: Table Records Deleted by anonymous user!
am 14.03.2011 10:19:11 von Joerg Bruehe
Hello!
Johan De Meersman wrote:
>> From: "Vikram A"
>
>> Thank you for info. Now we enabled the logs. The DB administrator
>> itself made a mistake that he restored the back up
>
> This may be obvious, but keep your logs on separate disks if you can - full query logs take quite a bit of I/O away, so if you have them on the same disks as your data they may have a significant impact on performance.
While the above is true, I see a far more relevant reason to keep logs
and data on separate disks:
If you ever want to use your logs for recovery after a (physical) disk
problem, it is essential that they were not also damaged by the issue.
Keeping them on a separate disk drive (drive, not just partition) will
give you that independence.
Granted, a severe damage to controller or machine (overvoltage, fire,
theft, ...) may still cause the simultaneous loss of both data and logs,
but these should be less likely that the ordinary disk breakage.
Against the other risks, protect yourself by taking scheduled backups to
removable media which you store externally, like in a bank safe.
Then, you cannot lose all your data, but only those which were changed
since the last backup, so it becomes a matter of backup frequency.
And remember: a RAID is no replacement for backup.
Regards,
Joerg
--
Joerg Bruehe, MySQL Build Team, joerg.bruehe@oracle.com
ORACLE Deutschland B.V. & Co. KG, Komturstrasse 18a, D-12099 Berlin
Geschaeftsfuehrer: Juergen Kunz, Marcel v.d. Molen, Alexander v.d. Ven
Amtsgericht Muenchen: HRA 95603
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org