Tracking outbound connections

Question

I am struggling with a task I\'ve been given. I was asked to reset an e-commerce site\'s stock to 0 for all products. I did that, however, after few hours, the stock was upd

Answer 1

For outbound, yes, thru wireshark, for instance. But that is heavy lifting for the average guy.

For inbound, you can look at the general query log.

select @@general_log; -- a 1 indicates it is turned on for capture
select @@general_log_file; -- the file that it logs to

So all the queries can be logged to the General Query Log if the setting is turned on. And as you can load it in a text editor, you can search on, say, table name. It shows date and time. Or at least a date offset and time. You can search on "connect". Or, my favorite, "Access denied for user" to see if my honeypots are working for intruders :p

Check out the manual page for The Error Log too, noting warning levels, and verbosity settings based on your version.

I would recommend that one create a backup copy by date (named as such) and delete it to start fresh. It can grow in size rapidly. Don't forget whether or not you have the setting turned on or off at the moment.