How can I capture Oracle SQLPlus traffic? I am running Wireshark with no capture filters and then starting SQLPlus and attempting to connect to a remote Oracle database (the connection doesn't succeed). I cannot see any packets relating to the SQL*Plus traffic in the capture.
Can someone talk me through exactly what's needed to capture traffic from SQLPlus connecting to a remote Oracle database?
Many thanks in advance.
The problem turned out to be a badly formatted tnsnames.ora file. The entries were originally formatted like this:
The Oracle client tools reported this as ilegally formatted. I add spaces between the elements like so:
Now I can see tcp.port==1521 traffic.