Forensic Analysis on XML/XMPP Protocol [Solved]

Hi Guys,

Is it possible to extract the files that are captured under the XMPP/XML Protocol?

I have used wireshark to analyze the PCAP file (linked below) and I am able to see the filename and size, but i have no idea how to extract/rebuild the image.

Analyzing it, there are 3 images, named
1) BH2016.JPG
2) Camouflage.JPG
3) FunnyEric.JPG

Any idea or pointers on doing this?

Here is the PCAP if you any of you are willing to help.

Forensic Analysis - PCAP File

Thanks in advance.

—————————————————————————————————

Solution

Wireshark Q&A