HOWTO: sniff mysql queries with Wireshark

Very simple sniffer for mySQL executed on the server:

svilen@svi:~$ sudo tshark port 3306 -i lo -R mysql.query -Tfields -e mysql.query
Running as user "root" and group "root". This could be dangerous.
Capturing on lo
show tables
SELECT DATABASE()
show databases
show tables
select * from user


Change the interface (-i lo) if you are not running on the same server.