Re: SQL Profiler 2005 - IP Address?
J,
As far as I know, you can't get that from the profiler. However, you can
run
netstat -n
from a command prompt, look for port 1433 (or whatever port you are using)
and get the IP number that way. If profiler is showing a bunch of
unsuccessful login attempts (typically trying to login under sa) then those
will have a time wait listed in the netstat output.
Russ Stevens
.
Relevant Pages
- Re: SQL Profiler 2005 - IP Address?
... you can't get that from the profiler. ... look for port 1433 ... unsuccessful login attempts then ... those will have a time wait listed in the netstat output. ... (microsoft.public.sqlserver.security) - Re: Have I been compromised? chkrootkit: "Warning: Possible LKM Trojan installed" - nmap:
... assuming netstat wasn't one of the programs ... listed there for port 1313 correspond to the PIDs chkproc spit out. ... all your services while you upgrade all the software that needs upgrading. ... > Every week or so I'll run chkrootkit, mostly just because I feel I ... (comp.os.linux.security) - RE: I think Ive been hacked...please help!
... > connecting within seconds of boot. ... port scanning the machine from the outside ... experience performing incident response activities, ... one will run netstat and see something listening on ... (Incidents) - Re: Help, my machine has been hacked
... >> also take a look at processes running in your system, ... >> opened (netstat -tupan), environment changesetc. ... If you provide port 80 to the outside ... filter invalid packets, in particular tcp scans with invalid flags, where ... (comp.os.linux.security) - Re: Detecting Internet activity
... connection and then use netstat tool to confirm whether or not the relevant ... port is 20 or 21. ... Title: Enhance netstat ... >- when I open a FTP connection, none of the listed ports match the ... (microsoft.public.win32.programmer.networks) |
|