Re: TCP/UDP Data Streams - Packet Reassembly

[Richard Sharpe <rsharpe () richardsharpe com>]

On Thu, 19 Dec 2002, Susan Chan Lee wrote:

> Anyone know where to obtain information of re-assembling TCP/UDP data
> streams. 
>
> I mean I have captured data using Tcpdump (i.e. raw data), how to I
> recombine the data into the orginal word attachment (or like)? Cannot
> seem to find any information anywhere on the technical involved in this.

Well, Ethereal can follow TCP streams, so that is a start ... You might 
have to get your hands dirty in the code to do more :-)

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe