How To See MySQL Traffic Using tcpdump

Author: erics, March 22nd, 2016

Quick-and-dirty way: tcpdump -i eth0 -s 0 -l -X dst port 3306 NOTE: That option above is a dash-ELL which provides for unbuffered output. Maciej Dobrzanski posted the following script on the Percona site at https://www.percona.com/blog/2008/11/07/poor-mans-query-logging/, which I am reposting without permission because it is so good:

tcpdump -i eth0 -s 0 -l -w - dst port 3306 | strings | perl -e '
while(<>) { chomp; next if /^[^ ]+[ ]*$/;
  if(/^(SELECT|UPDATE|DELETE|INSERT|SET|COMMIT|ROLLBACK|CREATE|DROP|ALTER)/i) { 
    if (defined $q) { print "$q\n"; } 
    $q=$_;
  } else { 
    $_ =~ s/^[ \t]+//; $q.=" $_"; 
  } 
}'

tcpdump -i eth0 -s 0 -l -w - dst port 3306 | strings | perl -e '

while(<>) { chomp; next if /^[^ ]+[ ]*$/;

if(/^(SELECT|UPDATE|DELETE|INSERT|SET|COMMIT|ROLLBACK|CREATE|DROP|ALTER)/i) {

if (defined $q) { print "$q\n"; }

$q=$_;

} else {

$_ =~ s/^[ \t]+//; $q.=" $_";

}

Categories: How-To's, Technology Tags: 3306, mysql, Network, Scan, Sniff, Sniffer, tcpdump, Watch | No comments

How To Create a Web Request Sniffer Using tcpdump and Perl

Author: erics, November 3rd, 2011

YMMV…

#!/usr/bin/perl
use strict;
$|	= 1;
our $LIMIT = shift || 5000;
open (STDIN,"/usr/sbin/tcpdump -Atpn dst port 80 |");
while (<>) {
    last unless $LIMIT--;
    next unless /get|host|post|http|xml/i;
    print;
}

#!/usr/bin/perl

use strict;

$| = 1;

our $LIMIT = shift || 5000;

open (STDIN,"/usr/sbin/tcpdump -Atpn dst port 80 |");

while (<>) {

last unless $LIMIT--;

next unless /get|host|post|http|xml/i;

print;

}

Additional Reading http://chaosreader.sourceforge.net/ http://www.id-snippet.com/3008/dump-http-packet-using-tcpdump-and-perl/ http://stein.cshl.org/~lstein/talks/WWW6/sniffer/ http://www.perlmonks.org/index.pl?node_id=254612

Categories: How-To's, Technology Tags: howto, perl, tcpdump, tips | No comments

S	M	T	W	T	F	S
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30	31

How To See MySQL Traffic Using tcpdump

How To Create a Web Request Sniffer Using tcpdump and Perl

Our Link Network

Business

Client Websites

Fine Dining

Friends & Family

Galleries

Health

Resources

Technology

Travel

The Archives

Latest Ramblings…

Various Topics of No Interest