Wireshark · Ethereal-users: Re: [Ethereal-users] Triggers in Ethereal & Post-Capture Processing

["M.C. van den Bovenkamp" <marco@xxxxxxxxxxxxxxxxxxx>]

Jeff Gilchrist wrote:

> Are there any programs or scripts out there that will take a capture
> file and strip out the different TCP "streams" into seperate files?  For
> instance, you capture traffic for an hour and there are 15 FTP
> sessions.  With the GUI program, you can "Follow TCP Stream" and it will
> pull out the data for that stream.  Is there any way to do that with the
> text version or another program so it can be done automatically instead
> of manually following streams with the GUI and saving the data?

'tcpflow' will do that:
http://www.circlemud.org/~jelson/software/tcpflow/

		Regards,

			Marco.