[Winpcap-users] Packet From Application?

[Gianluca Varenni]

As I already said, that information is simply NOT available (unless the specific SQL protocol used for the communication embeds the application name in the packets themselves, and I seriously doubt that).

Have a nice day
GV
  ----- Original Message ----- 
  From: LHB 
  To: winpcap-users at winpcap.org 
  Sent: Friday, July 31, 2009 8:20 PM
  Subject: Re: [Winpcap-users] Packet From Application?


  Dear All

  I also work in the same project like thanh try to build and SQL audit application. the application will be installed in the same
  server with SQL server. So the question is who (IP address,hostname, APPLICATION NAME, userid,..etc) when (date,time), what( query, update,delete, ddl change),

  We have difficulty in identify which application send the message to SQL server, can some one help us on this, any idea is appreciated

  Thanks
  Bac




   
  On Fri, Jul 31, 2009 at 9:21 AM, tran thanh <xbachngoctuyetx at gmail.com> wrote:

    Dear All,
    I have captured a packet sent to SQL Server,
    How do I know Which Application sent it ?

    Regard,
    Tran Bach Thanh.

    _______________________________________________
    Winpcap-users mailing list
    Winpcap-users at winpcap.org
    https://www.winpcap.org/mailman/listinfo/winpcap-users






------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090804/21cba7cf/attachment.htm