MySQL

The MySQL module scans a MySQL server over TCP.

Flags

• BaseFlags
• TLSFlags
• --verbose: More verbose logging. This causes the outputs marked Debug only to be returned.

Scan

1. Read the Initial Handshake Packet from the server
2. If server supports TLS, send a SSL_Request packet and then do a TLS handshake

Output

• handshake.parsed.protocol_version: The protocol version (10 for all known versions)
• handshake.parsed.server_version: A string from the server representing its version
• handshake.parsed.connection_id: Debug only. A 32-bit integer from the server identifying this connection
• handshake.parsed.auth_plugin_data_part_1: Debug only. The first part of the auth plugin data (8 chars).
• handshake.parsed.filler_1: Debug only. An unused byte. Omitted if 0.
• handshake.parsed.character_set: Debug only. A byte indicating the server's character set
• handshake.parsed.short_handshake: Debug only. If true, the following fields are omitted.
• handshake.parsed.status_flags: A map of FLAG_NAME: true
• handshake.parsed.capability_flags: A map of FLAG_NAME: true
• handshake.parsed.auth_plugin_data_len: Debug only. The length of the auth plugin data.
• handshake.parsed.reserved: Debug only. The reserved data (omitted if it is all 0s)
• handshake.parsed.auth_plugin_data_part_2: Debug only. The remainder of the auth plugin data.
• handshake.parsed.auth_plugin_name: Debug only. The name of the auth plugin.
• error: Only present if an error occurs.
• error.parsed.header: Debug only. The identifier for the ERR packet.
• error.parsed.error_code: The 16-bit integer identifying the error
• error.parsed.sql_state_marker: Debug only. State marker character.
• error.parsed.sql_state: Debug only. The five-character string representing the SQL state.
• error.parsed.error_message: The human-readable error message.
• ssl_request: Only present if the server supports SSL and the client attempted to negotiate an SSL connection.
• ssl_request.parsed.capability_flags: The client capability flag, as a map from FLAG_NAME:true. Includes at least CLIENT_SSL.
• ssl_request.parsed.max_packet_size: Debug only. 32-bit integer giving the max packet size.
• ssl_request.parsed.character_set: Debug only. The 8-bit integer identifying the character set the client wants to use.
• ssl_request.parsed.reserved: Debug only. The reserved 23-byte binary data. Omitted if all 0s.
• tls: The TLSFlags log.