使用tcpdump抓取sql

tcpdump-sql.sh

#!/bin/bash
#this script used montor mysql network traffic.echo sql
tcpdump -i ${1:eth0} -s 0 -l -w - dst port ${2:3306} | strings | perl -e '
while(<>) { chomp; next if /^[^ ]+[ ]*$/;
    if(/^(SELECT|UPDATE|DELETE|INSERT|SET|COMMIT|ROLLBACK|CREATE|DROP|ALTER|CALL)/i)
    {
        if (defined $q) { print "$q\n"; }
        $q=$_;
    } else {
        $_ =~ s/^[ \t]+//; $q.=" $_";
    }
}'