Wireshark-users: Re: [Wireshark-users] TCP reassembling for HTTP messages extraction

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 24 Apr 2007 12:59:00 -0700
On Tue, Apr 24, 2007 at 06:25:12PM +0200, Laurent Burgy wrote:

> So, I have a trace of TCP messages with HTTP messages as payload... I 
> would like to extract these HTTP messages and only to a file... The 
> 'follow TCP stream' option seems to work only for one stream but my 
> trace clusters many streams ...
> 
> Is there a way to get all the HTTP messages from my trace ?

What do you want to do with the HTTP messages?  Save all of the data 
from them (HTML pages, images, other downloaded files, etc.)?  Or just 
save a stream of all of the HTTP streams together?


Steve