I pull out from the HTTP traffic audio files from Wireshark that say fragments on them. How can I put them together in order to listen to what the Audio Files will play as when I try to click on them they said they cannot work.
Hi and welcome to Wireshark!
To enable Wireshark to reassemble TCP streams you need to go to Edit and then Preferences...
Under Protocols choose TCP and make sure there is a check under Allow subdissector to reassemble TCP streams.
Under File - Export Objects - HTTP you should now see only one entry per file.
Select the audio file and save it. It should be bit for bit what you downloaded and should play fine.
Do read up how Wireshark does reassembly to understand why you need to do that.
Finally, if you are doing TCP analysis in the future you'll probably want to turn off Allow subdissector to reassemble TCP streams.
Cheers,
Spooky
Asked: 2019-09-25 17:28:46 +0000
Seen: 792 times
Last updated: Sep 26 '19
Did you enable Allow subdissector to reassemble TCP streams in Preferences for Protocol TCP?
No, I had not thought of that as I am new to Wireshark and have no idea how to do that.
The feature was still turned on when I did the capture. The audio file say Fragments(audio=0) and Fragments(audio=21333333).