It doesn't? I can both export the packet bytes and use "Follow TCP
Stream" on reassembled IP-packets. But maybe I'm misunderstanding
something.
On Mon, 8 Jan 2007 23:25:52 -0800, "Guy Harris" <guy@xxxxxxxxxxxx> said:
>
> On Jan 8, 2007, at 10:14 AM, Kaplan, Irine wrote:
> > Can I use the Wireshark for IP fragments reassembling? I mean, can
> > it save reassembled frame, not only display reassembled data?
> No, it has no provision for saving reassembled frames.
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
--
Hans Nilsson
hasse_gg@xxxxxxxx
--
http://www.fastmail.fm - Same, same, but different