hi, harris,
3x a lot. I got it.
but i still have question, I use http+mmse, and not I can view this in a reassembled format, but, when I choose to select "file -> save as", I find I can only save the packet itself, not all the reassembled packets.
so, how can I do? how can I save all the re-assembled packets?
Regards,
Fulcrum.
>
> Message: 9
> Date: Thu, 04 Aug 2005 01:24:00 -0700
> From: Guy Harris <gharris@xxxxxxxxx>
> Subject: Re: [Ethereal-users] again: Follow TCP Stream decoder plugins
> To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
> Cc: ethereal-dev@xxxxxxxxxxxx
> Message-ID: <42F1D0A0.7080608@xxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Fulcrum wrote:
>
> > recently I am suffering of analyse mobile-phone-related MMSE protocol.
> > normally a MMSE message will be devided into several packets, and I can
> > only "follow TCP stream", but I can't user ethereal to analyze this
> > stream...
>
> What protocols are being used? Ethereal can support MMSE over various
> WAP protocols, as well as HTTP.
>
> For HTTP, turn on the "Reassemble HTTP headers spanning multiple TCP
> segments" and "Reassemble HTTP bodies spanning multiple TCP segments"
> options, and also turn on the "Allow subdissector to reassemble TCP
> streams" option.
>
> Those options are in the dialog box for "Preferences" in the "Edit"
> menu. Open up the "Protocols" list, and select HTTP to edit the HTTP
> preferences and TCP to edit the TCP preferences. Click "OK" to use
> those settings for the file you have open, and click "Save" and "OK" to
> make those settings your default.
>
>