Ethereal-users: [Ethereal-users] Re: Re: Re: again: Follow TCP Stream decoder plugins

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Fulcrum" <wzhu@xxxxxxxxxxxxxxx>
Date: Fri, 5 Aug 2005 11:14:17 +0800
hi, what do you mean "by saving the Ethereal preference settings"? of course I save the re-assemble protocol preference, it can only help me to view 
target packets, but in this way, every time I need to open a large packets file which cost so long time ...

I have a large .cap file, and I use filter "mmse" to select all my needed packets which are all re-assembled. I want to I can save this re-assembled packets into a new file, then I can open that new file quickly every time. but when I use "save as", I can't get a desired file. 

Is there any approach to get it?

3x. 

Fulcrum. 


> > From: Guy Harris <gharris@xxxxxxxxx>
Subject: Re: Re: again: Follow TCP Stream decoder plugins 

You can't. The capture file formats Ethereal uses are oriented towards each "record" in the file containing a link-layer packet.

If you want to do that so that the next time you view it in Ethereal, the packets are reassembled, you do that by saving the Ethereal preference settings.