Ask Your Question
0

How do I put audio files from HTTP together when they're shown as "fragments"?

asked 2019-09-25 17:28:46 +0000

updated 2019-09-26 02:55:05 +0000

Guy Harris gravatar image

I pull out from the HTTP traffic audio files from Wireshark that say fragments on them. How can I put them together in order to listen to what the Audio Files will play as when I try to click on them they said they cannot work.

edit retag flag offensive close merge delete

Comments

Did you enable Allow subdissector to reassemble TCP streams in Preferences for Protocol TCP?

Spooky gravatar imageSpooky ( 2019-09-26 01:54:58 +0000 )edit

No, I had not thought of that as I am new to Wireshark and have no idea how to do that.

Wireshar3532 gravatar imageWireshar3532 ( 2019-09-26 02:07:44 +0000 )edit

The feature was still turned on when I did the capture. The audio file say Fragments(audio=0) and Fragments(audio=21333333).

Wireshar3532 gravatar imageWireshar3532 ( 2019-09-26 02:19:27 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-09-26 02:20:30 +0000

Hi and welcome to Wireshark!

To enable Wireshark to reassemble TCP streams you need to go to Edit and then Preferences...

Under Protocols choose TCP and make sure there is a check under Allow subdissector to reassemble TCP streams.

Under File - Export Objects - HTTP you should now see only one entry per file.

Select the audio file and save it. It should be bit for bit what you downloaded and should play fine.

Do read up how Wireshark does reassembly to understand why you need to do that.

Finally, if you are doing TCP analysis in the future you'll probably want to turn off Allow subdissector to reassemble TCP streams.

Cheers,

Spooky

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-09-25 17:28:46 +0000

Seen: 200 times

Last updated: Sep 26 '19