Wireshark · Ethereal-users: [Ethereal-users] rebuilding files sent during ethereal capture session

[Hani Barakat <barakat@xxxxxxxxxxxxx>]

i pose this issue and i think it will (maybe) require attention from the 
developers or other people with higher forms of intelligence to provide 
a plugin for ethereal that will isolate files in ethereal sessions.

i am thinking it is nothing major to provide such functionality. all one 
has to do is make a filter that would look for the header or the 
beginning of a file as indicated by the traffic. the indicated content 
will be routed from the starting point until the end into a file that is 
saved on the hard drive. ... and viola we have recreated the file.

sorry if this topic has already been discussed but i have just now made 
my way into the ethereal mailing list.

thank you.