Problem : Malformed TDS response packet on SQL Server Packets

Problem : Malformed TDS response packet on SQL Server Packets

Capturing network frames behind a SQL server 2005 NIC i get 70% of them being:

TDS      Response Packet[Malformed Packet]

It seems to affect Network requesting from that SQL server.

Anyone got a clue on what’s going on ?

TCP is clear, only the TDS encapsuled in seems malformed.

Regards,


 

Solution : Malformed TDS response packet on SQL Server Packets

For decode, start here:
http://www.freetds.org/tds.html
Note that the Docs go only through SQLServer 2005, and may have been interpretted after the fact. The only definitive answer is the Microsoft Source code that creates the packets. Obviously, if the decoder in WireShark is wrong, you’ll need to perform a manual decode of the packet and see if it really is mangled.

I also found this in my searches:
http://www.microsoft.com/technet/security/bulletin/ms99-059.mspx
It’s old, but might be applicable.