This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

MSSQL Connection String

0

Hi, I am migrating one of our db server to new hardware. Our application is legacy and not all developer exist who developed this app.

We want to see what servers are connecting to database, we had done this with dmvs. But the next challenge is to capture connection string. In code usually qualified domain exist for connection but on some places one had bind the IPAddress. So this is risky to move without know these details. We want to extract that information, so that dev can fix code on required server

I want to capture connection string information e.g. <connectionstring>Server = ServerName , Catalog=MyDb ........ <connectionstring>Server = ServerIP , Catalog=MyDb ..............

How can I capture such information ?

Thanks

asked 05 Jun '15, 05:28

thbaig1's gravatar image

thbaig1
6112
accept rate: 0%


One Answer:

0

Basically, the best way is to use a SPAN port or TAP to record what the server is doing. Take a look at the Wiki page for some setup options: https://wiki.wireshark.org/CaptureSetup/Ethernet

Then, you have to hope that the communication isn't encrypted or you won't see any connection strings. Use the conversation statistics to see what conversations your server is using, and then use "Follow TCP Stream" to see ASCII extracts of the communication details.

answered 05 Jun '15, 05:47

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%