[Dick Gooris <gooris@xxxxxxxxxx>]

Guy, Richard,

Both thanks for the info. Indeed I am referring to the case that
all the messages are in the captured file. Its understandable
that messages sometimes are incomplete due to the high traffic
or the reason that the monitor started just after the first
part of the message was received. 

I have a case which I will often see in the future (I guess), 
as an incomplete one due to its size.

I will see if I can find a way to concatenate these buffers.
I guess that 'follow tcp stream' has such a kind of mechanism.

Thanks for the info. At least I have the impression that I am not
inventing the wheel.

Kind regards,

	- Dick Gooris               The Netherlands