Wireshark · Ethereal-dev: [Ethereal-dev] about TCP segment(s) reconstruction and tcpdump

["Srivathsan_Srinivasagopalan" <Srivathsan_Srinivasagopalan@xxxxxxxxxx>]

Hi,

            Does tcpdump occasionally not register a tcp segment (under heavy traffic)?  I am trying to figure out a way to reconstruct the application level data(payload) from tcp streams. I will be writing my own code for this and will be using and getting some help from ethereal open source.

 

Please let me know about this behaviour and if there are any alternatives for proper TCP segment reconstruction/reassembly.

 

Thanks,

S.Srivathsan

 

DISCLAIMER:
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated..