How can I capture Oracle SQLPlus traffic? I am running Wireshark with no capture filters and then starting SQLPlus and attempting to connect to a remote Oracle database (the connection doesn't succeed). I cannot see any packets relating to the SQL*Plus traffic in the capture. Can someone talk me through exactly what's needed to capture traffic from SQLPlus connecting to a remote Oracle database? Many thanks in advance. asked 19 Apr '17, 04:42 Corin edited 19 Apr '17, 04:44 |
One Answer:
The problem turned out to be a badly formatted tnsnames.ora file. The entries were originally formatted like this:
The Oracle client tools reported this as ilegally formatted. I add spaces between the elements like so:
Now I can see tcp.port==1521 traffic. answered 24 Apr '17, 07:24 Corin edited 24 Apr '17, 07:27 |
Some questions to sort things out:
tcp.port==1521
)I've identified the problem, thank you for your help. I will post an answer below.