Wireshark-users: Re: [Wireshark-users] Using Wireshark for IP fragments reassembling

From: "Hans Nilsson" <hasse_gg@xxxxxxxx>
Date: Mon, 08 Jan 2007 21:40:54 -1100

Aha. Well maybe exporting the packets and then doing some magic with
text2pcap or something like that is possible?

On Mon, 8 Jan 2007 23:50:54 -0800, "Guy Harris" <guy@xxxxxxxxxxxx> said:
> 
> On Jan 8, 2007, at 11:38 PM, Hans Nilsson wrote:
> 
> > It doesn't? I can both export the packet bytes and use "Follow TCP
> > Stream" on reassembled IP-packets. But maybe I'm misunderstanding
> > something.
> 
> You can export the packet bytes of an individual reassembled IP packet.
> 
> You can't save a capture file the packets of which are reassembled IP  
> packets, which is what I suspect the person who asked the original  
> question wanted.
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
-- 
  Hans Nilsson
  hasse_gg@xxxxxxxx

-- 
http://www.fastmail.fm - Send your email first class