I looked in Activity monitor and found a section with most expensive queries. In the list of qureries i think is all th queries. I have tried wireshark, but no luck., I want to know what the request, probably a Stored Procedure , when a search is done to pick rows from table. Is there a log?
i would run sql profiler with some soefic parameters ie specific stored procedure name. run it so that it dumps data into a sql table. run it as ling as you need and later on query that table excluding the app name
or change that stored proxedure to dump data into an audit table the details of the entity calling the sproc