I've got a gig or so of packet-dumps captured from tcpdump. And I need to reconstruct these into raw TCP flows to process the data... I can reliably process the data if I use tcpflow on the packets. but then I lose the timestamps contained in the packets, which I need. Anybody have any ideas on how to approach this?