Re: tcpdump file recovery

From: Barry Margolin (barmar_at_alum.mit.edu)
Date: 09/01/05

  • Next message: pk: "J2EE single sign-on" 
    Date: Wed, 31 Aug 2005 19:19:03 -0400

    In article <slrndhc2n1.fu0.ibuprofin@compton.phx.az.us>,
     ibuprofin@painkiller.example.tld (Moe Trin) wrote:

    > I'd rather doubt that it's PRACTICAL. Using a stream editor, you could
    > convert the stream of packets into a file, but you would have to know the
    > protocols involved, and how to convert TCP and IP header data (specifically
    > the Offset and Length data) and match up port numbers and IP addresses.
    > The data is in there, it's just not something that would be practical.

    You mean like Ethereal's "Follow TCP Stream" operation does? 

    -- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
  • Next message: pk: "J2EE single sign-on"

    Relevant Pages

    • Re: Multithread safety
      ... The output TCP stream. ... > The socket object is thread safe. ... When you call recv() and send ...
      (microsoft.public.win32.programmer.networks)
    • Re: SslStream weakness
      ... stream, however, it's important that you correctly close the SSL stream ... before the TCP stream, or else it would be relatively easy for an attacker ... FTP is one example of such a protocol. ...
      (microsoft.public.platformsdk.security)
    • Re: VOIP Softphone
      ... The application receives a data stream off the network. ... spaced out every 50 milliseconds which equates to 800 bytes of audio data. ... in my application by either dropping packets if they are to late, ...
      (microsoft.public.win32.programmer.mmedia)
    • Re: read() returns ETIMEDOUT on steady TCP connection
      ... I'am also meet this problem in my mss server(missey streaming server). ... What is unusual is that this is happening right in the middle of sending a steady stream of data with no network congestion. ... The likelihood of this happening seems to increase as the number of audience connections increases. ... all packets received are delivered to the upper layer. ...
      (freebsd-net)
    • Re: read() returns ETIMEDOUT on steady TCP connection
      ... I'am also meet this problem in my mss server(missey streaming server). ... What is unusual is that this is happening right in the middle of sending a steady stream of data with no network congestion. ... The likelihood of this happening seems to increase as the number of audience connections increases. ... all packets received are delivered to the upper layer. ...
      (freebsd-net)
    • Quantcast