No. But you are very likely right in case when login was successful but later do not have some internal rights in MSSQL like it was in this case. Checking MSSQL logs would be more universal method.
Not because rights, it is because sql natively encrypts all communications even before login… So… Kinda hard to imagine how you could catch a wrong password using Wireshark. Because of the protocol, not because of the negotiation.
Enviado de meu SM-N9600 usando o Tapatalk
Made a quick test. Here is the content of captured packet received from MSSQL server:
H*~
)CT%E\@:_C9 jPhmTHLogin failed for user 'sa'. MSSQL2012
[emoji102] Welp… Hehe what a surprise
Thanks for taking the time to show me! Appreciate it
Thanks!
Enviado de meu SM-N9600 usando o Tapatalk