Ethereal-users: Re: [Ethereal-users] Getting a "raw" binary file with a copy of a frame?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Peter Valdemar Mørch <swp5jhu02@xxxxxxxxxxxxxx>
Date: Sun, 19 Sep 2004 13:21:55 +0200
Superb!

Both your comments were right on!

ronnie sahlberg ronniesahlberg-at-gmail.com |Lists| wrote:
You can save the content in binary of any PDU in ethereal by clicking
it to select it in the dissect pane
and then right-click to bring up the context specific popup.
In this popup pick "Export selected packet bytes" and save it to a file.

I never considered rightclicking in the dissection pane. And there I can save the PDU at any layer! Incredibly cool! (Was I able to do that in 0.9.X too, I wonder... - ah never mind...)

I've always wondered how to do this, and then it turns out to be so easy - just as I expected... Wonderful! Glad I asked.

Is the reason you want to do this so that you can paste together a
large HTTP PDU spanning multiple segments together?
Yes!

If so, have you tried enabling Edit/Preferences/Protocols/TCP/Allow subdissector to desegment TCP stream
and all four preferences in
Edit/Preferences/Protocols/HTTP/

I tried the HTTP options - but I didn't fiddle with the TCP options - and so I couldn't get it to work. Yes, this is exactly what I needed! COOL!!!!

Peter

--
Peter Valdemar Mørch
http://www.morch.com