Wireshark-users: Re: [Wireshark-users] MS SQL 2000
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Wed, 21 Apr 2010 20:17:38 -0400
Martin Visser wrote:

The protocol Microsoft SQL uses is called Tabular Data Stream (TDS). Your
traffic might be using a non-standard TCP port. Find the TCP stream that you
think is between server and client, select a packet, right-click and select
Decode As.. and choose TDS for the protocol (using the server side TCP port
as the reference).

If that doesn't work it probably is because your TDS traffic is wrapped
inside of SSL, for encryption security. In that case you will first need to
provide to wireshark the server's private key - as  per
http://wiki.wireshark.org/SSL

Regards, Martin
Alternatively: using Edit ! Preferences ! Protocols ! TDS you can specify a TCP port or port-range to be decoded as TDS. 

There are also several other preferences which may (or may not) help.