Learning Wireshark

[Keith Roberts <keith () karsites net>]

Hi All.

Is it possible to use wireshark to reconstruct (file 
carving?) email messages and their MIME attachments send 
across a network card, and also things like multimedia 
downloaded via TCP/IP protocols please? If so, how do I go 
about doing this from within Wireshark?

I'm talking about using a pcap file for this - not a live 
capture.

Kind Regards,

Keith Roberts

-----------------------------------------------------------
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-----------------------------------------------------------
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe