Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] recontsruct NNTP data

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Karsten Bertens" <kbertens@xxxxxxxxx>
Date: Fri, 8 Aug 2008 09:48:35 +0200

I would like to reconstruct some avi file send over NNTP.
The file is split into a couple of segments but I got the competed pcap file with all the fragments. I know NNTP uses yenc encoding, the file is yenc encoded and a yenc decoding program does recognize the attachment but still I cant play the avi file.
My avi player keep saying the file is corrupt.
 
I tried a couple of ways to decode this avi but without any solution:
- Used follow TCP stream and loaded this data in the yenc decoder
- even loaded the complete pcap file in the decoder
- tried to cut and paste the data stream and put them into the decoder
 
Like I said without any good results. Does anyone has a good idea to extract this data?
 
Regards,
K Bertens
 
  • Prev by Date: Re: [Wireshark-users] Wireshark-users Digest, Vol 27, Issue 7
  • Next by Date: Re: [Wireshark-users] Identifying application
  • Previous by thread: Re: [Wireshark-users] Betr: Re: Identifying application
  • Next by thread: [Wireshark-users] How to read Read specific sub-fields in Tshark??
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation