Wireshark-users: Re: [Wireshark-users] Database Protocol support

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 4 Dec 2008 19:01:21 -0800

On Dec 4, 2008, at 6:54 PM, Al Aghili wrote:

Do you know if tshark can dissect MS SQL (ms sql 2005) protocol?

I have the impression that Microsoft SQL Server (and the Sybase server from which it originally derived) uses a protocol that Wireshark calls "TDS" (Tabular Data Stream):

	http://en.wikipedia.org/wiki/Tabular_Data_Stream
	http://msdn.microsoft.com/en-us/library/aa174503(sql.80).aspx
	http://www.freetds.org/

That protocol is dissected by Wireshark/TShark, although whether we dissect all versions of it, including the MS SQL Server 2005 version, is another matter:

	http://msdn.microsoft.com/en-us/library/cc448436.aspx