What if you'd save the TCP stream from wireshark/tshark, then ngrep
the resulting dump file (see pcap file processing examples here:
http://ngrep.sourceforge.net/usage.html) ?
Stefan
On Fri, Jan 9, 2009 at 3:25 PM, T c <tcastellanos619@xxxxxxxxx> wrote:
> Hi all,
>
> I often need to grab all printable text from an entire TCP stream for analysis, not just a single packet.
>
> I'm referring to the option of highlighting a selected packet in a trace, r-clicking, and selecting copy, printable text.
>
> I need to be able to, for example, I r-click a packet and select follow tcp stream...but from here, I need to grab all printable text from the entire trace.
>
> Anyone know a way to do this?
>
> TIA!
>
> TC
>
>
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
