Wireshark · Ethereal-users: [Ethereal-users] Reassembling binary files over HTTP

[Jonathan Carse <jonathan.carse@xxxxxxxxx>]

Hello.
I captured a TCP stream containing a transfer of a (large) binary file
(a swf file), and I want to export that file to a binary file on my
harddisk.
I know that Ethereal has the functionality of reassembling TCP and
HTTP packets (explained here:
http://wiki.ethereal.com/TCP_20Reassembly), but when I try to use it
for the file I want to export (which is about 1MB), Ethereal freezes
(not after selecting the packet, but rather after selecting the "Media
Type: application/x-shockwave-flash" field in the packet's details).
The disadvantages of the reassembling functionality (memory and CPU
usage) in Ethereal are known, as explained in the above link.
Is there anyone like me that stumbled upon this problem?
I hope I won't have to resort to building my own program that takes a
*.cap file and assembles the HTTP conversations within.
Any help will be appreciated, thanks.