MySQL Tcpdump system : use percona-toolkit to analyze network packages
We can identify problem SQLs with high execution frequency.
With DBMON system and AWR system we can find problem SQLs in a special time (high frequency, occurs over a period of time)
View this PDF: