Re: tcpdump and wireshark

[Guy Harris <guy () alum mit edu>]

On Sep 15, 2008, at 2:05 PM, Dmitry wrote:

> Test one:
> I've opened dump with wireshark.
> Found stream, filtered it out and saved raw data to file 'dump.hex'

What do you mean by "raw data"?  Do you mean raw *binary* data, or raw  
data as a hex dump?

And did you save the raw contents of the packets, or did you extract  
the payload of the HTTP reply?

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.