Wireshark · Ethereal-users: [Ethereal-users] Decoding TCP packets

["Branko Milosevic" <branko@xxxxxxxxxxx>]

Hello everyone,

 

Greetings from Montenegro.

 

I am using Ethereal for a while and I need some help regarding automating capture-analyze process.

 

One of the options in GUI version (Ethereal) is "Follow TCP Stream" and I found it very useful. I am trying to monitor and log all of the TCP traffic that is destined for my servers (four IP addresses). I am using tethereal for background saving pcap files for late analyze. It will be very useful for me if "Follow TCP Stream" could be automated for every TCP session in pcap file. Is there any way to automatically decode TCP sessions from pcap files? Or, perhaps, there is a more elegant solution for my project?

 

Any comment is very helpful.

 

Best regards,

Branko Milosevic

branko@xxxxxxxxxxx

+381 67 200 246