How it works

SQL Server Database Monitor acts as an intrusion detection system (IDS) for your SQL Server databases. It records details of the user and application that accessed the database, the SQL statement used, and the database to which it applied. It works by monitoring the network traffic that passes through the SPAN or NetFlow port on your core network switch, using deep packet inspection (DPI) techniques to analyze the traffic and identify the SQL statements that users and applications are transmitting over network.

SQL Server Database Monitor is language-aware, enabling you to drill down to details of specific SQL operations and statements. It supports the three main subsets of the SQL language:

  • DCL (Data Command Language)
    • GRANT
    • REVOKE
  • DML (Data Manipulation Language)
    • DELETE
    • INSERT
    • SET
    • UPDATE
  • DDL (Data Definition Language)
    • ALTER
    • CREATE
    • DROP

You can also view details of successful and failed logins.

Supported SQL Server versions

SQL Server Database Monitor supports the following versions of SQL Server:

  • SQL Server 7.5
  • SQL Server 2000
  • SQL Server 2005
  • SQL Server 2008

Find out more

If you have any questions about how SQL Server Database Monitor can help you with your network monitoring requirements, please contact us. If you would like to see SQL Server Database Monitor in action, please try our online demo system. or download a free 30-day trial to try it on your own network with your own data.