I am trying so sniff a multi-part POST request using Wireshark. When viewing the capture I can select "Reassembled TCP" which looks to contain the header and all the data in the transmission. However I can't seem to select the entire thing to save it. If I go back to the frame view i can select the frame, which usually selects the entire transmission, but it will only end up saving the post data.
How can I save the entire Reassembled TCP?