Re: TCP/UDP Data Streams - Packet Reassembly

From: Martin Hermanowski (martinat_private)
Date: Thu Dec 19 2002 - 08:53:44 PST

Next message: Pieter-Bas IJdens: "Re: Ascertaining UDF and ISO CD time zone?"

Previous message: Guy Harris: "Re: [tcpdump-workers] TCP/UDP Data Streams - Packet Reassembly"
In reply to: Susan Chan Lee: "[Full-Disclosure] TCP/UDP Data Streams - Packet Reassembly"
Next in thread: Ali: "RE: TCP/UDP Data Streams - Packet Reassembly"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, Dec 19, 2002 at 12:08:27AM +0800, Susan Chan Lee wrote:
> Anyone know where to obtain information of re-assembling TCP/UDP data
> streams. 
> 
> I mean I have captured data using Tcpdump (i.e. raw data), how to I
> recombine the data into the orginal word attachment (or like)? Cannot
> seem to find any information anywhere on the technical involved in this.

Have a look at `tcpflow'

application/pgp-signature attachment: stored

Next message: Pieter-Bas IJdens: "Re: Ascertaining UDF and ISO CD time zone?"
Previous message: Guy Harris: "Re: [tcpdump-workers] TCP/UDP Data Streams - Packet Reassembly"
In reply to: Susan Chan Lee: "[Full-Disclosure] TCP/UDP Data Streams - Packet Reassembly"
Next in thread: Ali: "RE: TCP/UDP Data Streams - Packet Reassembly"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Dec 19 2002 - 19:29:13 PST