Re: tcpdump and wireshark

[marco () linuxgoeroe dhs org]

> By ´raw´ data I mean collected binary data from the payloads.
> Wireshark does correctly restore binary stream from payloads.
> I don´t know how to do this via tcpdump (if it possible off course)

You might want to look at tcpflow:
http://www.circlemud.org/~jelson/software/tcpflow/

              Regards,

                       Marco.

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.