Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Apr 2004 12:20:36 -0700
From:      Bill Campbell <freebsd@celestial.com>
To:        freebsd-isp@freebsd.org
Subject:   Re: tcpdump for sniffing POP3 -- methods ?
Message-ID:  <20040413192036.GA57348@alexis.mi.celestial.com>
In-Reply-To: <1081881451.14526.77.camel@unixws1>
References:  <20040413180323.GA13554@mind.net> <1081881451.14526.77.camel@unixws1>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 13, 2004, Adam Maloney wrote:
>I've done this in the past.  I had tcpdump spitting out all the dst port
>110 packets to a file.  Then a perl script with Net::TCPDump (or
>whatever it's called) to parse it.

The tcpflow program makes this far easier as it separates each
connection out into its own file.  The command line options for
tcpflow are about the same as tcpdump.

Bill
--
INTERNET:   bill@Celestial.COM  Bill Campbell; Celestial Software LLC
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

It's very glamorous to raise millions of dollars, until it's time for the
venture capitalist to suck your eyeballs out.
		-- Peter Kennedy, chairman of Kraft & Kennedy.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040413192036.GA57348>