On Dec 4, 2008, at 6:54 PM, Al Aghili wrote:
Do you know if tshark can dissect MS SQL (ms sql 2005) protocol?
I have the impression that Microsoft SQL Server (and the Sybase server
from which it originally derived) uses a protocol that Wireshark calls
"TDS" (Tabular Data Stream):
http://en.wikipedia.org/wiki/Tabular_Data_Stream
http://msdn.microsoft.com/en-us/library/aa174503(sql.80).aspx
http://www.freetds.org/
That protocol is dissected by Wireshark/TShark, although whether we
dissect all versions of it, including the MS SQL Server 2005 version,
is another matter:
http://msdn.microsoft.com/en-us/library/cc448436.aspx
