search

hoterran / tcpcollect

Watch sql base libpcap
141 stars 59 forks source link

COM_PROCESSINFO and COM_USER #39

Open hoterran opened 11 years ago

hoterran commented 11 years ago 
T 127.0.0.1:47033 -> 127.0.0.1:3306 [AP]
  01 00 00 00 0a                                        .....       

T 127.0.0.1:47033 -> 127.0.0.1:3306 [AP]
  21 00 00 00 11 6b 6b 6b    00 14 d9 8d 8f ef 1e 51    !....kkk.......Q
  b8 06 6f d3 81 17 bc 8a    7b 00 dc 6a af 5a 74 65    ..o.....{..j.Zte
  73 74 00 08 00