In order to post questions, answers, or comments, you now need a validated email address. Details on how to validate your address are in the FAQ.

Hi. I am trying to use WireShark (WS) to monitor traffic between client and server, on the same machine. The application talks to sqla through an odbc dsn, set for tcpip on port 2638. WS reports a blizzard of traffic, even before I start sqla. When I start sqla, the same inscrutable blizzard just continues. When I set WS to report only traffic on port 2638, the traffic screen goes blank. I want to use a packet monitor to observe packet traffic between sqla client and server, when sqla is running with different encryption settings. Any thoughts/suggestions appreciated. Thanks.

asked Apr 21 '12 at 13:21

dejstone's gravatar image

dejstone
929284365

Just two guesses:

  • Are you sure the connection is using TCP/IP at all (and not shared memory, as would be typical for same-box communication)?

  • What happens when you monitor the client port (as specified by sa_conn_info()) instead of the server port (2638 by default)?

(Apr 21 '12 at 14:25) Volker Barth

My experience with WireShark on Windows is that local machine TCP/IP traffic is not captured by WireShark. In order to capture packets with WireShark, I needed to make sure the client and server were on different machines.

answered Apr 23 '12 at 08:57

Ian%20McHardy's gravatar image

Ian McHardy
2.0k12236

edited Apr 23 '12 at 08:57

There is a tool called RawCap that apparently does work for same-machine connections. I have never used it myself, but at least one person here has, and it seems to work well.

(Apr 23 '12 at 09:12) Graeme Perrow

To be sure you're using tcpip, start the db engine from the run command something like this

dbsrvX -x tcpip -n engineName c:\database\x.db

When you set up your ODBC connection, on the database tab enter engineName in the server name field, leave all of the other fields blank EXCEPT the encryption key, and on the network tab check TCPIP and uncheck Shared memory.

answered Apr 22 '12 at 12:15

Tom%20Mangano's gravatar image

Tom Mangano
46771322

edited Apr 23 '12 at 08:36

Mark%20Culp's gravatar image

Mark Culp
18.2k9109212

Your answer
toggle preview

Are you providing an answer to the original question, or making a comment on the question or an answer? If you are making a comment please do not post a new answer. Click "Add new comment" on the question or answer instead. If you are responding to a previous comment, click on the "reply" icon (    ) for that comment.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link: [text](http://url.com/ "title")
  • image: ![alt text](/path/img.jpg "title")
  • numbered list (indent for sublists):
    1. Foo
    2. Bar
  • bullet list (indent for sublists):
    * Foo
    * Bar
  • to add a line break, add two spaces to where you would like the new line to be.
  • Code blocks should be indented by 4 spaces. SQL code should begin with ":::SQL" on the first line.
  • basic HTML tags are also supported

Tags:

×25

Asked: Apr 21 '12 at 13:21

Seen: 834 times

Last updated: Apr 23 '12 at 09:12

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link: [text](http://url.com/ "title")
  • image: ![alt text](/path/img.jpg "title")
  • numbered list (indent for sublists):
    1. Foo
    2. Bar
  • bullet list (indent for sublists):
    * Foo
    * Bar
  • to add a line break, add two spaces to where you would like the new line to be.
  • Code blocks should be indented by 4 spaces. SQL code should begin with ":::SQL" on the first line.
  • basic HTML tags are also supported