Ethereal-users: Re: [Ethereal-users] TDS / SQL Decodes

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 8 Aug 2004 00:19:30 -0700
On Sun, Aug 08, 2004 at 02:51:05AM -0400, Bernie Davidovics wrote:
> I am using Ethereal to look at SQL traffic between clients and a MS SQL 
> Server which rides over TDS. Many of the TDS packets decoded by 
> Ethereal show "UnKnown Packet types" and appear to be confusing 
> Ethereal even though I am sure this is a valid TDS/SQL data stream. I 
> downloaded the latest binaries for Red Hat 9 (10.0 of Ethereal)
> 
> Is there a more recent decode available?

Not yet.

> Where can I get it?

When Ethereal 0.10.6 comes out, it'll have a newer version of the TDS
decoder.

Whether it dissects the packet types in question is another matter.  TDS
is *NOT*, as far as I know, fully documented; a lot of the Ethereal TDS
dissector was developed through reverse-engineering, and it's not always
the case that everything in a protocol can be successfully
reverse-engineered, so the dissector might still get confused even by
valid TDS data streams.