Re: tcpdump and wireshark

[Dmitry <mitroko () gmail com>]

Thank you. I´ll try.

I think, I found what´s going on.
I´ve read manual more accurately and found, that -w key writes WHOLE
packets, NOT payloads.

And now my question is:
can tcpdump extract payloads from packets, or it just extracting headers?

Dmitry.


> You might want to look at tcpflow:
> http://www.circlemud.org/~jelson/software/tcpflow/<http://www.circlemud.org/%7Ejelson/software/tcpflow/>
>
>              Regards,
>
>                       Marco.
>
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.