Great tutorial from Martin! http://blog.discountasp.net/how-to-find-sql-injections-using-your-http-logs/