Newbie question!

NTDEV
1

I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

2

This forum is about the system-level development for Windows.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: tocsjung
Newsgroups: ntdev
To: Windows System Software Devs Interest List
Sent: Thursday, June 23, 2005 5:17 AM
Subject: [ntdev] Newbie question!

I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Yes, I know.
I wonder whether i can get sql query related information by filtering I/Os or etc.
Please, Let me know if it is possible to catch sql query statement.

Thanks.
“Maxim S. Shatskih” wrote in message news:xxxxx@ntdev…
This forum is about the system-level development for Windows.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: tocsjung
Newsgroups: ntdev
To: Windows System Software Devs Interest List
Sent: Thursday, June 23, 2005 5:17 AM
Subject: [ntdev] Newbie question!

I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

4

The problem is that an sql query is not an operating system level
interface. Applications communicate with sqlserver through some
mechanism (pipes, sockets, etc.) and those are os level interfaces and
can be filtered. In this forum your question does not make much sense.

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of tocsjung
Sent: Thursday, June 23, 2005 12:43 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Newbie question!

Yes, I know.

I wonder whether i can get sql query related information by filtering
I/Os or etc.

Please, Let me know if it is possible to catch sql query statement.

Thanks.

“Maxim S. Shatskih” wrote in message
news:xxxxx@ntdev…

This forum is about the system-level development for
Windows.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----

From: tocsjung mailto:xxxxx

Newsgroups: ntdev

To: Windows System Software Devs Interest List
mailto:xxxxx

Sent: Thursday, June 23, 2005 5:17 AM

Subject: [ntdev] Newbie question!

I want to develop a program which can monitor sql query
of MSSQL.
That is, All activities in the database should be
monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown
lmsubst tag argument: ‘’
To unsubscribe send a blank email to
xxxxx@lists.osr.com

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com</mailto:xxxxx></mailto:xxxxx>

5

Guys, this fellow may actually have a question that is completely appropriate for this forum… I have seen software that anayyzes database performance by monitoring network and disk transactions. The objective of these sort of tools is to analyze the transactions to improve their efficiency. This sort of tool can make a big difference to companies with hudge databases.

If the SQL queries are carried across a network then you can use a NDIS Intermediate (IM) driver to monitor the packets that are exchanged between the client and the server.

If the client and the server are on the same host, then no packets are ever created and a NDIS IM driver cannot be used. In this situation SQL transactions that are exchanged between client and serever on the same host can be monitored using a Winsock layered service provider (LSP) or by a Transport Data Interface (TDI) filter driver.

If you want to watch the SQL disk transactions, then some sort of disk filter is what you need.

Please read the DDK and keep asking questions.

Good luck,

Thomas F. Divine, Windows DDK MVP
http://www.pcausa.com

“tocsjung” wrote in message news:xxxxx@ntdev…
I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

6

I’m still trying to find the SQL Query CDB in the scsi spec :slight_smile:

Yes the OP can filter disk operations, but deciding what group of disk
IO constitutes an sql query would be a bit of a puzzle. He could simply
measure read/write operations to disks or volumes that constitute an SQL
database, diskperf would be a good place to start, but that did not seem
to be what he was asking.

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Thomas F. Divine
Sent: Thursday, June 23, 2005 9:18 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Newbie question!

Guys, this fellow may actually have a question that is completely
appropriate for this forum… I have seen software that anayyzes
database performance by monitoring network and disk transactions. The
objective of these sort of tools is to analyze the transactions to
improve their efficiency. This sort of tool can make a big difference to
companies with hudge databases.

If the SQL queries are carried across a network then you can use a NDIS
Intermediate (IM) driver to monitor the packets that are exchanged
between the client and the server.

If the client and the server are on the same host, then no packets are
ever created and a NDIS IM driver cannot be used. In this situation SQL
transactions that are exchanged between client and serever on the same
host can be monitored using a Winsock layered service provider (LSP) or
by a Transport Data Interface (TDI) filter driver.

If you want to watch the SQL disk transactions, then some sort of disk
filter is what you need.

Please read the DDK and keep asking questions.

Good luck,

Thomas F. Divine, Windows DDK MVP

http://www.pcausa.com

“tocsjung” wrote in message
news:xxxxx@ntdev…

I want to develop a program which can monitor sql query of
MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

7

“Roddy, Mark” wrote in message news:xxxxx@ntdev…
I’m still trying to find the SQL Query CDB in the scsi spec J

Yes the OP can filter disk operations, but deciding what group of disk IO constitutes an sql query would be a bit of a puzzle. He could simply measure read/write operations to disks or volumes that constitute an SQL database, diskperf would be a good place to start, but that did not seem to be what he was asking.

For sure, the OP question was vague - but he (she) is an admitted newbie. The question could be on or off topic. Don’t know (yet…).

And I certainly don’t know how to accomplish SQL filtering with a disk filter. If anyone knows whether that is possible, then it’s probably you.

OTOH, the SQL transactions usually are passed through a network connection - even if client and server are on the same host. There at least one has the well-known server port to help identify the database transactions. Been there, done that.

Regards,

Thomas

------------------------------------------------------------------------------

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Thomas F. Divine
Sent: Thursday, June 23, 2005 9:18 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Newbie question!

Guys, this fellow may actually have a question that is completely appropriate for this forum… I have seen software that anayyzes database performance by monitoring network and disk transactions. The objective of these sort of tools is to analyze the transactions to improve their efficiency. This sort of tool can make a big difference to companies with hudge databases.

If the SQL queries are carried across a network then you can use a NDIS Intermediate (IM) driver to monitor the packets that are exchanged between the client and the server.

If the client and the server are on the same host, then no packets are ever created and a NDIS IM driver cannot be used. In this situation SQL transactions that are exchanged between client and serever on the same host can be monitored using a Winsock layered service provider (LSP) or by a Transport Data Interface (TDI) filter driver.

If you want to watch the SQL disk transactions, then some sort of disk filter is what you need.

Please read the DDK and keep asking questions.

Good luck,

Thomas F. Divine, Windows DDK MVP

http://www.pcausa.com

“tocsjung” wrote in message news:xxxxx@ntdev…

I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

8

This is a question of writing an SQL Server add-on, not the system-level OS add-on.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
----- Original Message -----
From: Thomas F. Divine
Newsgroups: ntdev
To: Windows System Software Devs Interest List
Sent: Thursday, June 23, 2005 5:17 PM
Subject: Re:[ntdev] Newbie question!

Guys, this fellow may actually have a question that is completely appropriate for this forum… I have seen software that anayyzes database performance by monitoring network and disk transactions. The objective of these sort of tools is to analyze the transactions to improve their efficiency. This sort of tool can make a big difference to companies with hudge databases.

If the SQL queries are carried across a network then you can use a NDIS Intermediate (IM) driver to monitor the packets that are exchanged between the client and the server.

If the client and the server are on the same host, then no packets are ever created and a NDIS IM driver cannot be used. In this situation SQL transactions that are exchanged between client and serever on the same host can be monitored using a Winsock layered service provider (LSP) or by a Transport Data Interface (TDI) filter driver.

If you want to watch the SQL disk transactions, then some sort of disk filter is what you need.

Please read the DDK and keep asking questions.

Good luck,

Thomas F. Divine, Windows DDK MVP
http://www.pcausa.com

“tocsjung” wrote in message news:xxxxx@ntdev…
I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

9

Does one of these help?

http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/FlexTracer.shtml
http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/TracePlus-Win.shtml

–
Pankaj Garg
This posting is provided “AS IS” with no warranties and confers no rights.

“Thomas F. Divine” wrote in message news:xxxxx@ntdev…

“Roddy, Mark” wrote in message news:xxxxx@ntdev…
I’m still trying to find the SQL Query CDB in the scsi spec J

Yes the OP can filter disk operations, but deciding what group of disk IO constitutes an sql query would be a bit of a puzzle. He could simply measure read/write operations to disks or volumes that constitute an SQL database, diskperf would be a good place to start, but that did not seem to be what he was asking.

For sure, the OP question was vague - but he (she) is an admitted newbie. The question could be on or off topic. Don’t know (yet…).

And I certainly don’t know how to accomplish SQL filtering with a disk filter. If anyone knows whether that is possible, then it’s probably you.

OTOH, the SQL transactions usually are passed through a network connection - even if client and server are on the same host. There at least one has the well-known server port to help identify the database transactions. Been there, done that.

Regards,

Thomas

----------------------------------------------------------------------------

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Thomas F. Divine
Sent: Thursday, June 23, 2005 9:18 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Newbie question!

Guys, this fellow may actually have a question that is completely appropriate for this forum… I have seen software that anayyzes database performance by monitoring network and disk transactions. The objective of these sort of tools is to analyze the transactions to improve their efficiency. This sort of tool can make a big difference to companies with hudge databases.

If the SQL queries are carried across a network then you can use a NDIS Intermediate (IM) driver to monitor the packets that are exchanged between the client and the server.

If the client and the server are on the same host, then no packets are ever created and a NDIS IM driver cannot be used. In this situation SQL transactions that are exchanged between client and serever on the same host can be monitored using a Winsock layered service provider (LSP) or by a Transport Data Interface (TDI) filter driver.

If you want to watch the SQL disk transactions, then some sort of disk filter is what you need.

Please read the DDK and keep asking questions.

Good luck,

Thomas F. Divine, Windows DDK MVP

http://www.pcausa.com

“tocsjung” wrote in message news:xxxxx@ntdev…

I want to develop a program which can monitor sql query of MSSQL.
That is, All activities in the database should be monitored.

Is it possible? Then, What shall i do at first.

Thanks in advance!

—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com