tcpflow -r evidence.pcap xxd -s +256 192.168.001.158.05190-192.168.001.159.01272 | xxd -s -256 -r > recipe.docx echo "MD5 Sum: " md5sum recipe.docx echo "Magic Number: " xxd -l 4 -ps recipe.docx