tcpdump分析端口3306

# tcpdump -i ens160 -s 0 -l -w - dst port 3307 | strings
tcpdump: listening on ens160, link-type EN10MB (Ethernet), capture size 262144 bytes
commit
SET autocommit=1
SELECT

        pk_psndoc,

-----------------------------

tcpdump -i ens160 -s 0 -l -w - dst port 3306 | strings | perl -e '
while(<>) { chomp; next if /^[^ ]+[ ]*$/;
    if(/^(SELECT|UPDATE|DELETE|INSERT|SET|COMMIT|ROLLBACK|CREATE|DROP|ALTER|CALL)/i)
    {
        if (defined $q) { print "$q\n"; }
        $q=$_;
    } else {
        $_ =~ s/^[ \t]+//; $q.=" $_";
    }
}'