I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the WiFi
closed as off topic by Adnan, AJ Henderson, Noordung, NULLZ, Rory Alsop♦ Jun 3 '13 at 20:49
Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.
You should be able to just right click on any HTTP packet and select "Follow TCP Stream" which will rebuild the page. You could select the "Save As" and save it somewhere, e.g.: "captured-page.html"
Edited to add more:
Here is the walk through on Wireshark: http://www.wireshark.org/docs/wsug_html_chunked/ChAdvFollowTCPSection.html Your other option is to use tcpflow: tcpflow -r http.cap