Author image David Cannings

NAME

tcprebuild - uses TCP::Rebuild to reconstruct TCP streams to files on disk

SYNOPSIS

 tcprebuild [options]

 Options
   -i --infile     - input pcap file (required)
   -f --filter     - pcap capture filter (see tcpdump manpage)
   -s --separator  - print a separator between packets
   -h              - print help and exit
   -v              - print version and exit

DESCRIPTION

This utility takes data from pcap files and rebuilds it using libnids (via. Net::LibNIDS) before saving to disk.

TO DO

  • Implement --files-from (including - for STDIN) to rebuild multiple files at once

SEE ALSO

The programs tcpick and tcpflow, which do a similar thing to this Perl utility

AUTHORS

David Cannings, <david@edeca.net>

This code was copyrighted in 2010, and is released under the same terms as Perl itself.