Ethereal-users: [Ethereal-users] Saving the data from a tftp conversation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Stuart MacDonald" <stuartm@xxxxxxxxxxxxxxx>
Date: Thu, 15 Jan 2004 14:27:05 -0500
Ethereal 0.10.0. I've got a log of a tftp download. The file ends up
corrupted, and I'd like to double check the data on the wire against
the data on the server. To that end, I'd like to save all the data of
the TFTP packets into one large file.

I can't find a way to do this easily. Export data only exports one
packet's worth of data at a time. This would be the work around then,
but there's several hundred packets and I don't want to have to string
them together one by one. Filtering the log so only the tftp blocks
are visible and using Save still saves the entire capture, not just
the visible packets.

Any suggestions? Besides parsing the whole capture file with a custom
utility? I checked out tcpdump as well, but didn't find anything
helpful. Dejagoogle didn't help either; most results were ethereal-dev
traffic talking about new features.

..Stu