Frank Bulk - iNAME wrote:
Once you've performed a full capture on port 25, Wireshark does a nice job
of providing an option to extract the relevant conversation by
right-clicking on just one packet in that conversation and choosing
something called "Follow the TCP stream", I believe.
Ok. I've never captured in tcpdump and then imported into Wireshark
before, but I'll do some tests, scp the file to my Windows workstation,
then follow the stream.
Once I ensure I get a clean stream, I'll post the results.
Steve
