in reply to Re: Reconstructing a file from a packet dump
in thread Reconstructing a file from a packet dump

Nah, the packet capture is definitely complete. The length of the capture is a parameter that you can specify, and indeed if you set it too short you will not get the whole packet. I know that the capture is complete because I verified the size with the senders of the data. This is an academic project, so I at least know what it was that was supposed to be captured. The purpose of the exercise is to extract a covert channel from it.
  • Comment on Re: Re: Reconstructing a file from a packet dump