Wireshark · Ethereal-users: [Ethereal-users] Re: Re: again: Follow TCP Stream decoder plugins

["Fulcrum" <wzhu@xxxxxxxxxxxxxxx>]

hi, harris,

3x a lot. I got it.

but i still have question, I use http+mmse, and not I can view this in a  reassembled format, but, when I choose to select "file -> save as", I find I can only save the packet itself, not all the reassembled packets. 

so, how can I do? how can I save all the re-assembled packets?

Regards,

Fulcrum.

> 
> Message: 9
> Date: Thu, 04 Aug 2005 01:24:00 -0700
> From: Guy Harris <gharris@xxxxxxxxx>
> Subject: Re: [Ethereal-users] again: Follow TCP Stream decoder plugins
> To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
> Cc: ethereal-dev@xxxxxxxxxxxx
> Message-ID: <42F1D0A0.7080608@xxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> Fulcrum wrote:
> 
> > recently I am suffering of analyse mobile-phone-related MMSE protocol. 
> > normally a MMSE message will be devided into several packets, and I can 
> > only "follow TCP stream", but I can't user ethereal to analyze this 
> > stream...
> 
> What protocols are being used?  Ethereal can support MMSE over various 
> WAP protocols, as well as HTTP.
> 
> For HTTP, turn on the "Reassemble HTTP headers spanning multiple TCP 
> segments" and "Reassemble HTTP bodies spanning multiple TCP segments" 
> options, and also turn on the "Allow subdissector to reassemble TCP 
> streams" option.
> 
> Those options are in the dialog box for "Preferences" in the "Edit" 
> menu.  Open up the "Protocols" list, and select HTTP to edit the HTTP 
> preferences and TCP to edit the TCP preferences.  Click "OK" to use 
> those settings for the file you have open, and click "Save" and "OK" to 
> make those settings your default.
> 
>