- open the capture file
- select the packet with the HTTP 200 OK
- click on the Media Type: xxx/yyy
- right click on the selected bytes in the hex pane
- select "Export Selected Packet Bytes..."
- give it a name.
(BTW probably doing about:cache in your browser's location and looking
and saving the file would be much easier).
L.
On 6/17/05, Jonathan Carse <jonathan.carse@xxxxxxxxx> wrote:
> Hello.
> I captured a TCP stream containing a transfer of a (large) binary file
> (a swf file), and I want to export that file to a binary file on my
> harddisk.
> I know that Ethereal has the functionality of reassembling TCP and
> HTTP packets (explained here:
> http://wiki.ethereal.com/TCP_20Reassembly), but when I try to use it
> for the file I want to export (which is about 1MB), Ethereal freezes
> (not after selecting the packet, but rather after selecting the "Media
> Type: application/x-shockwave-flash" field in the packet's details).
> The disadvantages of the reassembling functionality (memory and CPU
> usage) in Ethereal are known, as explained in the above link.
> Is there anyone like me that stumbled upon this problem?
> I hope I won't have to resort to building my own program that takes a
> *.cap file and assembles the HTTP conversations within.
> Any help will be appreciated, thanks.
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
