This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Cant see packets from SQL Server

0

Hello all,

i have problem what i would like to do is to se packets between application and sql server. I use filter for Wireshark set to port 1433 and i cant see any of packets beetwen app and db even i do some queries etc. Could you tell me why it can be that situation please of help...

asked 12 Jul '12, 13:20

nighttrain's gravatar image

nighttrain
1111
accept rate: 0%


One Answer:

1

Are the application and SQLServer instance on the same machine? If so you may have difficulties due to the way loopback connections work on Windows. See the wiki Loopback page for more info.

If the app and SQLServer instance are on different machines then you should be able to capture the traffic.

answered 12 Jul '12, 13:50

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Its on the same machine what should i do to get the packets?

(12 Jul '12, 14:04) nighttrain

I installed the Microsoft Loopback adapter succesfully but its set the ip for it: 169.254.152.239 and mask 255.255.0.0 in wireshark i cant see that interface how now could i use this?

(12 Jul '12, 14:39) nighttrain

I converted your "answers" to comments as that's how this Q&A site works.

Loopback capturing on Windows is hard. Try following some of the other info on the page I linked to. Your life will be much easier if you could just move the application to another machine.

(12 Jul '12, 14:54) grahamb ♦

RawCap (mentioned in the Loopback wiki) works pretty well.

(12 Jul '12, 19:49) Kurt Knochner ♦

is this still true for the latest version, 1.12.6?

(10 Aug '15, 12:30) debuke

Yes, it's not a Wireshark issue, the issue is with the capturing mechanism WinPCap.

(11 Aug '15, 00:46) grahamb ♦
showing 5 of 6 show 1 more comments