tshark captures mysql protocol packets

Turn off the ssl function of mysql

First of all, we need to turn off mysql's ssl, otherwise we can't see what the specific sql statement is.

sudo vim /etc/mysql/mysql.conf.d/mysqld.cnf edit the mysqld configuration file and add skip_ssl

Then restart the mysql service

sudo service mysql restart                  

Reference article: MySql turns off ssl

use tshark

tshark -Y mysql -T fields -e mysql.query