Wireshark · Ethereal-users: Re: [Ethereal-users] TCP Stream

["M.C. van den Bovenkamp" <marco@xxxxxxxxxxxxxxxxxxx>]

Emil Kafedjiiski wrote:

> I want to use tethereal  in this way: capturing some tcp packets and saving
> in file in the same time  i want to construct TCP stream from packets written
> in this file and write this stream in the other file. My idea is to get full
> TCP  stream wich later I can parse for sam data. Is this possible.

Skip tethereal and take a look at tcpflow (http://www.tcpflow.org). That
will probably do what you want. It will not save the packets themselves,
though, so if that's important, you will have to capture with tethereal
and postprocess the dump file with tcpflow later.

		Regards,

			Marco.