View Single Post
  #8 (permalink)  
Old 09-01-2005, 08:55 PM
Moe Trin
Guest
 
Posts: n/a
Default Re: tcpdump file recovery

In the Usenet newsgroup comp.security.misc, in article
<4316e703@news.uni-ulm.de>, Volker Birk wrote:

>Moe Trin <ibuprofin@painkiller.example.tld> wrote:


>>> I was wondering it its possible to reconstruct a binary file captured
>>> with a utility like ethereal.

>> Possible? Yes. Practical? No

>
>With an Ethereal dump it's possible to replay the traffic. Therefore
>it's possible and practical to restore transported binary files, if
>there was no encryption.


Have you an application that the O/P can use? He's already got a means to
replay the traffic - what he wants is something to rebuild it and then
display/run the result (which sounds like passing it to OE without concern
for any security).

Old guy


Reply With Quote