It doesn't? I can both export the packet bytes and use "Follow TCP Stream" on reassembled IP-packets. But maybe I'm misunderstanding something.
On Mon, 8 Jan 2007 23:25:52 -0800, "Guy Harris" <[EMAIL PROTECTED]> said: > > On Jan 8, 2007, at 10:14 AM, Kaplan, Irine wrote: > > Can I use the Wireshark for IP fragments reassembling? I mean, can > > it save reassembled frame, not only display reassembled data? > No, it has no provision for saving reassembled frames. > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users -- Hans Nilsson [EMAIL PROTECTED] -- http://www.fastmail.fm - Same, same, but differentÂ… _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users