On Thu, 19 Dec 2002, Susan Chan Lee wrote: > Anyone know where to obtain information of re-assembling TCP/UDP data > streams. > > I mean I have captured data using Tcpdump (i.e. raw data), how to I > recombine the data into the orginal word attachment (or like)? Cannot > seem to find any information anywhere on the technical involved in this.
Well, Ethereal can follow TCP streams, so that is a start ... You might have to get your hands dirty in the code to do more :-) Regards ----- Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
