tcpdump for MySQL - recording table modifications.

mysql-dump.sh

tcpdump -i eth0 -s 0 -l -w - dst port 3306 | strings | perl -e '
while(<>) { chomp; next if /^[^ ]+[ ]*$/;
  if(/^(INSERT|UPDATE)/) { 
    ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
    $time = "$hour:$min";
    if (defined $q) {
      if ($q =~ /INSERT\s+INTO\s+`(\w+)`/) {
        print "$time,insert,$1\n";
      }
      if ($q =~ /UPDATE\s+`(\w+)`/) {
        print "$time,update,$1\n";
      }  
    }
    $q=$_;
  } else { 
    $_ =~ s/^[ \t]+//; $q.=" $_"; 
  } 
}'