nmap命令导致em12c agent 高cpu-凯发app官方网站

应该是有人用nmap扫描端口呢，不幸的是导致em agent 高cpu。
需要下载patch 18502187，这个补丁不含在12.1.0.3.11的psu中（这是.3的最后一个psu，其它的没查），打补丁过程中会自动卸载16087066。
详见em 12c : agent consumes high cpu due to threads stuck in "jdbc.driver.ntfconnection.run" "ntfconnection.readfromnetwork" (doc id 1474263.1)

详细过程

$ export oracle_home=/u03/agent/core/12.1.0.3.0
$ $oracle_home/bin/emctl stop agent
oracle enterprise manager cloud control 12c release 3  
凯发app官方网站 copyright (c) 1996, 2013 oracle corporation.  all rights reserved.
agent is not running
$ ps -ef|grep java
    root  5308580  6488088   0   dec 14      - 13:38 /var/opt/tivoli/ep/_jvm/jre/bin/java -xmx384m -xminf0.01 -xmaxf0.4 -dsun.rmi.dgc.client.gcinterval=3600000 -dsun.rmi.dgc.server.gcinterval=3600000 -xbootclasspath/a:/var/opt/tivoli/ep/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/rcpbootcp.jar:/var/opt/tivoli/ep/lib/com.ibm.logging.icl_1.1.1.jar:/var/opt/tivoli/ep/lib/jaas2zos.jar:/var/opt/tivoli/ep/lib/jaasmodule.jar:/var/opt/tivoli/ep/lib/lwinative.jar:/var/opt/tivoli/ep/lib/lwinl.jar:/var/opt/tivoli/ep/lib/lwirolemap.jar:/var/opt/tivoli/ep/lib/lwisecurity.jar:/var/opt/tivoli/ep/lib/lwitools.jar:/var/opt/tivoli/ep/lib/passutils.jar:../../runtime/agent/lib/cas-bootcp.jar -xverify:none -cp eclipse/launch.jar:eclipse/startup.jar:/var/opt/tivoli/ep/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/launcher.jar com.ibm.lwi.launchlwi
pconsole  8847400  8781954   0   dec 14      -  9:09 /usr/java5/bin/java -xmx512m -xms20m -xscmx10m -xshareclasses -dfile.encoding=utf-8 -xbootclasspath/a:/pconsole/lwi/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/rcpbootcp.jar:/pconsole/lwi/lib/iscjaasmodule.jar:/pconsole/lwi/lib/com.ibm.logging.icl_1.1.1.jar:/pconsole/lwi/lib/jaas2zos.jar:/pconsole/lwi/lib/jaasmodule.jar:/pconsole/lwi/lib/lwinative.jar:/pconsole/lwi/lib/lwinl.jar:/pconsole/lwi/lib/lwirolemap.jar:/pconsole/lwi/lib/lwisecurity.jar:/pconsole/lwi/lib/lwitools.jar:/pconsole/lwi/lib/passutils.jar -xverify:none -cp eclipse/launch.jar:eclipse/startup.jar:/pconsole/lwi/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/launcher.jar com.ibm.lwi.launchlwi
$ pwd
/u01/backup/18502187
$ $oracle_home/opatch/opatch apply
oracle interim patch installer version 11.1.0.12.9
凯发app官方网站 copyright (c) 2017, oracle corporation.  all rights reserved.

oracle home       : /u03/agent/core/12.1.0.3.0
central inventory : /u01/app/oracle/orainventory
   from           : /u03/agent/core/12.1.0.3.0/orainst.loc
opatch version    : 11.1.0.12.9
oui version       : 11.1.0.11.0
log file location : /u03/agent/core/12.1.0.3.0/cfgtoollogs/opatch/18502187_feb_21_2017_17_28_49/apply2017-02-21_17-28-49pm_1.log

applying interim patch '18502187' to oh '/u03/agent/core/12.1.0.3.0'
verifying environment and performing prerequisite checks...
patch 18502187: optional component(s) missing : [ oracle.dbjava.jdbc, 11.1.0.7.0 ] 

conflicts/supersets for each patch are:

patch : 18502187

        bug superset of 16087066
        super set bugs are:
        13583799,  6895422
interim patch 18502187 is a superset of the patch(es) [  16087066 ] in the oracle home
opatch will roll back the subset patches and apply the given patch.
all checks passed.
provide your email address to be informed of security issues, install and
initiate oracle configuration manager. easier for you if you use your my
oracle support email address/user name.
visit for details.
email address/user name: 

you have not provided an email address for notification of security issues.
do you wish to remain uninformed of security issues ([y]es, [n]o) [n]:  y

please shutdown oracle instances running out of this oracle_home on the local system.
(oracle home = '/u03/agent/core/12.1.0.3.0')

is the local system ready for patching? [y|n]
y
user responded with: y
backing up files...
rolling back interim patch '16087066' from oh '/u03/agent/core/12.1.0.3.0'

patching component oracle.dbjava.ic, 11.1.0.7.0...
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/aq/aqnotificationevent$eventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/aq/aqnotificationevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/dcn/databasechangeevent$additionaleventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/dcn/databasechangeevent$eventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/dcn/databasechangeevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/ntfaqevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/ntfconnection.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/ntfdcnevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/ntfmanager.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/t4cconnection.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc6.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc6.jar/oracle/jdbc/driver/t4cttiokpn.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/aq/aqnotificationevent$eventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/aq/aqnotificationevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/dcn/databasechangeevent$additionaleventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/dcn/databasechangeevent$eventtype.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/dcn/databasechangeevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/ntfaqevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/ntfconnection.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/ntfdcnevent.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/ntfmanager.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/t4cconnection.class"
updating jar file "/u03/agent/core/12.1.0.3.0/jdbc/lib/ojdbc5.jar" with "/u03/agent/core/12.1.0.3.0/.patch_storage/16087066_feb_4_2013_04_52_18/files//jdbc/lib/ojdbc5.jar/oracle/jdbc/driver/t4cttiokpn.class"
rollbacksession removing interim patch '16087066' from inventory

opatch back to application of the patch '18502187' after auto-rollback.

patching component oracle.dbjava.ic, 11.1.0.7.0...

verifying the update...
patch 18502187 successfully applied
log file location: /u03/agent/core/12.1.0.3.0/cfgtoollogs/opatch/18502187_feb_21_2017_17_28_49/apply2017-02-21_17-28-49pm_1.log

opatch succeeded.
$ cd  /u03/agent/
$ ls
agent_inst             core                   plugins                plugins.txt.status
agentimage.properties  oneoffs                plugins.txt            sbin
$ cd agent_inst
$ cd sysman
$ cd config
$ ls
ouiinventories.add                  classpath.lst                       emd.properties.bak                  private.properties.bak
autotune.properties                 clientlogging.properties            emd.properties.tzbak                s_jvm_options.opt
b64internetcertificate.txt          cwallet.sso                         montrust                            server
b64localcertificate.txt             emd.properties                      monwallet
b64wls12xdemotrustcacert.txt        emd.properties.2015-03-10-10-58-42  nmxc.properties
b64wlsdemotrustcacert.txt           emd.properties.2015_03_10_11_00_15  private.properties
$ cp s_jvm_options.opt s_jvm_options.opt.bak
$ vi s_jvm_options.opt
"s_jvm_options.opt" 8 lines, 345 characters 
# this file contains static jvm options specific to the jvm shipped on a platform.
# each option must be in its own line:
# this file cannot contain dynamic properties like max/min heap size etc that can be affected by auto-tuning
-server
-djava.security.egd=file:///dev/./urandom
-dsun.lang.classloader.allowarraysyntax=true
-xgcpolicy:gencon
-xx:parallelgcthreads=4
-xx:-uselwpsynchronization
~
~
~
"s_jvm_options.opt" 9 lines, 395 characters 
$ $oracle_home/opatch/opatch lsinventory -details | grep 10203435
patch  10203435     : applied on sun jun 23 08:31:35 cst 2013
     10203435
     /u03/agent/core/12.1.0.3.0/inventory/oneoffs/10203435
     /u03/agent/core/12.1.0.3.0/.patch_storage/10203435_feb_7_2013_18_06_13
$ $oracle_home/bin/emctl start agent
oracle enterprise manager cloud control 12c release 3  
凯发app官方网站 copyright (c) 1996, 2013 oracle corporation.  all rights reserved.
starting agent .......................... started.
$  $oracle_home/bin/emctl status agent
oracle enterprise manager cloud control 12c release 3  
凯发app官方网站 copyright (c) 1996, 2013 oracle corporation.  all rights reserved.
---------------------------------------------------------------
agent version     : 12.1.0.3.0
oms version       : 12.1.0.3.0
protocol version  : 12.1.0.1.0
agent home        : /u03/agent/agent_inst
agent binaries    : /u03/agent/core/12.1.0.3.0
agent process id  : 5374162
parent process id : 19791964
agent url         :
repository url    :
started at        : 2017-02-21 17:31:50
started by user   : oracle
last reload       : (none)
last successful upload                       : 2017-02-21 17:32:15
last attempted upload                        : 2017-02-21 17:32:15
total megabytes of xml files uploaded so far : 0.01
number of xml files pending upload           : 2
size of xml files pending upload(mb)         : 0
available disk space on upload filesystem    : 74.05%
collection status                            : collections enabled
heartbeat status                             : ok
last attempted heartbeat to oms              : 2017-02-21 17:32:08
last successful heartbeat to oms             : 2017-02-21 17:32:08
next scheduled heartbeat to oms              : 2017-02-21 17:33:08

---------------------------------------------------------------
agent is running and ready
$ $oracle_home/opatch/opatch lsinv
oracle interim patch installer version 11.1.0.12.9
凯发app官方网站 copyright (c) 2017, oracle corporation.  all rights reserved.

oracle home       : /u03/agent/core/12.1.0.3.0
central inventory : /u01/app/oracle/orainventory
   from           : /u03/agent/core/12.1.0.3.0/orainst.loc
opatch version    : 11.1.0.12.9
oui version       : 11.1.0.11.0
log file location : /u03/agent/core/12.1.0.3.0/cfgtoollogs/opatch/opatch2017-02-21_17-32-41pm_1.log

lsinventory output file location : /u03/agent/core/12.1.0.3.0/cfgtoollogs/opatch/lsinv/lsinventory2017-02-21_17-32-41pm.txt

--------------------------------------------------------------------------------
installed top-level products (1): 

em platform (agent)                                                  12.1.0.3.0
there are 1 products installed in this oracle home.

interim patches (3) :

patch  18502187     : applied on tue feb 21 17:29:09 cst 2017
unique patch id:  17615617
   created on 6 may 2014, 06:29:08 hrs pst8pdt
   bugs fixed:
     6895422, 16479818, 18421945, 13583799

patch  19930706     : applied on tue feb 21 15:22:10 cst 2017
unique patch id:  18494312
patch description:  "em-agent bundle patch 12.1.0.3.11"
   created on 19 dec 2014, 04:34:56 hrs pst8pdt
   bugs fixed:
     17073796, 16736989, 17293519, 17164400, 18476937, 17438375, 17872949
     18808236, 17220173, 17934454, 18021456, 17627031, 17784127, 17568149
     16890278, 17579501, 17433479, 17280495, 18158996, 18108877, 17420195
     17628057, 17534755, 17184775, 17998843, 17214597, 17185106, 17704432
     18449370, 17904776, 18294467, 17538100, 17707019, 18348200, 17731541
     16959018, 17002243, 17881707, 18098772, 17797024, 17454539, 17751439
     17589284, 17979766, 17990826, 18277098, 17506428, 19930706, 16312089
     16513768, 17506828, 18043257, 18939087, 17271088, 17995417, 18104218
     16982797, 18613325, 17156527, 18649402, 17560540, 18753189, 17239371, 17973244

patch  10203435     : applied on sun jun 23 08:31:35 cst 2013
unique patch id:  15915936.1
   created on 7 feb 2013, 18:06:13 hrs pst8pdt
   bugs fixed:
     10203435

--------------------------------------------------------------------------------
opatch succeeded.