Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
AskSQLTeam
Ask SQLTeam Question
0 Posts |
 Posted - 2005-08-19 : 07:57:51
|
| Glen writes "Recently I found through the current activity spid1 with a user id which did not have rights to the master database executing a strange select statment. select 504,(several fields from the master tables followed this. After every restart of SQL the same user id was executing the select statement always with the 504, and different fields after that. Would anyone have an idea what was going on with this type of statement? The only reference I could find is the 504 was an Internet port.SQL 7.0 with most current service pack.NT 4.0 server." |
|
|
Thrasymachus
Constraint Violating Yak Guru
483 Posts |
Posted - 2005-08-19 : 09:46:28
|
| Have you trid using profiler to see where it is coming from?====================================================Regards,Sean RoussyThank you, drive through |
 |
|
|
mcrowley
Aged Yak Warrior
771 Posts |
Posted - 2005-08-19 : 11:39:29
|
| spid 1 is usually a system process. I don't think I have ever seen a user process using spid 1. At the moment, I see a process called "SIGNAL HANDLER" as spid 1. |
|
|
|
|
|
|
Possible hacker select statment