Wireshark · Wireshark-users: [Wireshark-users] Learning Wireshark

[Keith Roberts <keith@xxxxxxxxxxxx>]

Hi All.

Is it possible to use wireshark to reconstruct (file 
carving?) email messages and their MIME attachments send 
across a network card, and also things like multimedia 
downloaded via TCP/IP protocols please? If so, how do I go 
about doing this from within Wireshark?

I'm talking about using a pcap file for this - not a live 
capture.

Kind Regards,

Keith Roberts

-----------------------------------------------------------
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-----------------------------------------------------------