3

Suppose, I fire a query from SQL client to SQL Server:

select * from user

I believe, the SQL Server Profiler does not show the actual table data (rows). Can rows be viewed using wireshark software?

This link mentions about using filters to capture SQL traffic, but does it capture table data?

This link talks about capturing the SQL query fired using wireshark, but does not talk about capturing resultset.

Community
  • 1
  • 1
CleanBold
  • 1,551
  • 1
  • 14
  • 37
  • Did you try it? I believe it understands the TDS protocol but haven't tried myself. – Martin Smith May 03 '17 at 09:21
  • 2
    Possible duplicate of [How can I decode SQL Server traffic with wireshark?](http://stackoverflow.com/questions/2023589/how-can-i-decode-sql-server-traffic-with-wireshark) – Nick Kavadias May 03 '17 at 09:32
  • What are you trying to do? Most likely it's already supported by SQL Server. SQL Server's Extended Events are probably a lot easier to use than trying to decode TDS. SQL Server profiler is considered deprecated with no new functionality added since 2012. Extended Events are faster and far more detailed – Panagiotis Kanavos May 03 '17 at 12:19
  • @PanagiotisKanavos: as far as I know there is no way to capture result sets with extended events. Do tell if you have information to the contrary. – Jeroen Mostert May 03 '17 at 12:26
  • @NickKavadias The link you mentioned talks about capturing SQL query and not the resultset, so my question is not duplicate. – CleanBold May 04 '17 at 06:45
  • The result set is streamed as TDS as well and shows up in the capture just like the request. There's no conceptual difference. – Jeroen Mostert May 04 '17 at 09:21

0 Answers0