Post reply

Multiple login failed errors - how to find process attempting to connect.

  • May 16, 2011 at 3:36 am

    #237409

    So I can see the ip the login attempts are coming from & the state indicating password incorrect.

    I can logon to the other box but how do I see what process is trying to connect?

    Thanks in advance!

    Jessyb.

  • May 16, 2011 at 3:54 am

    #1324915

    Your best bet is to run a trace, either server-side or through Profiler. Make sure you capture the Application column (I think that's what it's called). How helpful this is will depend on what information the application passes to the SQL Server in the connection string.

    John

  • May 16, 2011 at 4:00 am

    #1324916

    Thanks, appreciate the response. I'll give it a go now.

  • May 17, 2011 at 3:18 am

    #1325648

    Hmm, it's not showing anything.

    I can see from the error log, a login failure every 60 seconds. I've been running profiler & can see absolutely nothing to correspond with these failures ... I'm running the normal traces, with the app / username etc. all the usual selections.

    Any other ideas? On the windows side or SQL side? Even just a clue & I can toddle off & read all about it, just not sure where to start here.

  • May 17, 2011 at 3:23 am

    #1325651

    When you set up the trace, you need to make sure that the Audit Login Failed event is included.

    John

  • May 17, 2011 at 4:22 am

    #1325667

    Doh! That works. Thank you. 🙂

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply