Not sure if this is the proper forum but here goes. While doing a wireshark capture from my local PC (Windows 7 Pro) I noticed a flood of TDS traffic from a server running SQL 2008 R2. The capture would show a query from the client side and a response from the server. So I ran wireshark on the server in question and was seeing the same traffic to my local PC as well as another PC on the LAN. Now trying to figure out what is going on with these two PC's and the SQL server. It looks like its just a back and forth, remote procedure call and a acknowledgment between the two. It's using the standard port on the server of 1433. Now I'm just trying to figure out how to take this to the next step in isolating what is going on between them.
As soon as I turn off the server and take a new wireshark capture on my PC, I just see the normal broadcast traffic you would expect to see. But if the server is on, then I'm flooded with TDS traffic between the two, to the point I can not see any broadcast traffic at all in the capture. I know this might be a shot in the dark, but any help would be appreciated.