[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain -->
- <!--x-date: Mon, 14 Nov 2005 13:21:53 -0800 (PST) -->
- <!--x-from-r13: gbzfnlre3135 ng lnubb.pbz (gbz fnjlre) -->
- <!--x-message-id: [email protected] -->
- <!--x-reference: [email protected] --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-subject: [ale] Pcap Tool? Re: Ale Digest, Vol 69, Issue 4 -->
- <li><em>date</em>: Mon, 14 Nov 2005 13:21:53 -0800 (PST)</li>
- <li><em>from</em>: tomsayer3135 at yahoo.com (tom sawyer)</li>
- <li><em>in-reply-to</em>: <[email protected]></li>
- <li><em>subject</em>: [ale] Pcap Tool? Re: Ale Digest, Vol 69, Issue 4</li>
If I store it as a CSV file, it stores it but only the
first line of data ie, no actuall message body of the
email, just the statement: MESSAGE BODY
I'm lookin for bassically all "text" of the email
transmission without the hex view. Is there a way to
get ethereal to do this? If not, any command-line
tools? I could do this via a perl/php/etc script but
I'm looking for pre-made tools first so I don't have
to reinvent the wheel.
Thanks,
Tom
-------------
Message: 9
Date: Mon, 14 Nov 2005 15:43:29 -0500
From: Geoffrey <esoteric at 3times25.net>
To: ale at ale.org
Subject: Re: [ale] pcap tool?
To: Atlanta Linux Enthusiasts <ale at ale.org>
Message-ID: <4378F6F1.8060002 at 3times25.net>
Content-Type: text/plain; charset=ISO-8859-1;
format=flowed
tom sawyer wrote:
> Hello all,
>
> Just wondering if anyone has seen a already built
tool
> that will take a pcap file of a stream of data and
> parse it out into plain-text (minus tcp/ip info).
>
> ex, I have a tcp-stream of an email transaction in a
> pcap file that I want to take just the text out.
>
> Any ideas? Ethereal only saves it as formated in a
> hex-dump type format with hex ......... hex text
From the file menu:
File->Export->???
A great many of useful options including text and csv
>
> Thanks,
> Tom
--
Until later, Geoffrey
__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
<a rel="nofollow" href="http://farechase.yahoo.com">http://farechase.yahoo.com</a>
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00257" href="msg00257.html">[ale] Pcap Tool? Re: Ale Digest, Vol 69, Issue 4</a></strong>
<ul><li><em>From:</em> joe at madewell.com (Joe Steele)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00251.html">[ale] RAID recovery</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00254.html">[ale] OT: Migrating off dying HDD</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00250.html">[ale] pcap tool?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00257.html">[ale] Pcap Tool? Re: Ale Digest, Vol 69, Issue 4</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00252"><strong>Date</strong></a></li>
<li><a href="threads.html#00252"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>