Score:1

Finding Downloaded Files In .pcap File

ng flag

I am looking through a packet capture (.pcap) file, trying to find 4 files downloaded from an FTP server, but haven’t been able to find them. I have tried many online tools, but am unable to use Wireshark, tcpick, and tcpxtract. Any help would be awesome, or any other tools I can use to find them. I’m using Ubuntu Version 18.

waltinator avatar
it flag
Without error messages, Ubuntu version, and other details, we don't believe you. Read https://askubuntu.com/help/how-to-ask
Score:3
by flag

You can use Wireshark. After installing Wireshark open the .pcap file in wireshark and follow the steps:

Filter ftp-data by typing in above pane and press enter.

Now Right click on FTP filter data stream showing and click Follow > TCP Stream

Now in the new window that open Change Show and save data as Raw click Save as... and save the file with your desired name.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.