This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

ICMP Data to file

0

In my particular case, someone has been sending a gzip file in 1024-byte increments via data in ICMP (ping). Wireshark doesn't seem to have an option to join all those data together, and export to a file. What's the best way to do this?

asked 27 Sep '15, 20:10

andzerb's gravatar image

andzerb
1111
accept rate: 0%

Could you provide a trace?

(28 Sep '15, 04:19) Christian_R

One Answer:

0

What's the best way to do this?

scripting with tshark or a TAP with Lua.

Regards
Kurt

answered 28 Sep '15, 01:11

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%