TCP/UDP Data Streams - Packet Reassembly

["Susan Chan Lee" <susan.lee () securityassoc com>]

Anyone know where to obtain information of re-assembling TCP/UDP data
streams. 

I mean I have captured data using Tcpdump (i.e. raw data), how to I
recombine the data into the orginal word attachment (or like)? Cannot
seem to find any information anywhere on the technical involved in this.

Thanks
Susan Chan Lee
Security Associates - Singapore

*************************************************************
Advanced Hands-On Security in the Arabic Gulf
DefensiveHacking and DefensiveForensics, Qatar January 2003 
www.securityassoc.com/DefensiveCourse.pdf
*************************************************************


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html