Re: libnids tcp reassembly

If you want to use Ethereal, you can hit the capture button to capture 
tcp traffic, then click on any packet, go to the "Analyze" menu, and 
click "Follow TCP Stream".  This will display only the current TCP 
stream (the one dealing with the packet you just clicked), and will 
allow multiple options to save that stream to a file, including C arrays 
and hex dumps.

		--Graeme Connell

muhammad alqama wrote:
> hi 
> i m using libnids for tcp reassembly. i m trying to sniff multiple tcp
> session simultaneously and want to save each tcp stream completely in
> separate file .
> 
>  can someone tell me HOW TO DO THAT.
> 
> 
> waiting for reply
> 
> regards
> alqama
> 
>