Wireshark mailing list archives

Re: Help needed


From: Martin Visser <martinvisser99 () gmail com>
Date: Thu, 23 Jun 2011 23:40:04 +1000

In a lot of applications where a web server is talking to a data base three
is nothing in the query that indicates who the web user is. That is, the web
server maintains the user context and uses a single privileged user for
queries.unless you can see something in the query, you probably are not
going to be able  to do this.
 On Jun 23, 2011 9:26 PM, "akshay vashishtha" <
akshay123_vashishtha () yahoo com> wrote:
Hi Everyone,

I did not mention the actual problem in the subject line as it would not
have been very clear if i would have written it there. :) Ok..Let me tell
you the problem.

I'm doing a capture on the web server. The web server contacts the SQL
server for getting the data. Now, there are many ports (say 10 - ports
ranging from 4001 to 4010) on web server which contacted the SQL server on
port 3180 (used for SQL transactions) in my capture.
There is a behavior called 'tcp piplelining' which happens between the Web
and SQL server. Let me explain you what i'm trying to say. As there are many
users who are accessing the website, the data of many users (say 5 users)
are going through the same port (say port no 4001) from web server to the
sql server. Similarly for all  other ports. So, while troubleshooting I'm
not able to differentiate my traffic which my system generated.One solution
is to do capture in a single user window.
Is there any other tool which can show my data separately i.e. do not mix
it with the data of other users??

Regards,
Akshay
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: