|File Search||Catalog||Content Search|
tcpflow understands sequence numbers and will correctly reconstruct data streams regardless of retransmissions or out-of-order delivery. However, it currently does not understand IP fragments; flows containing IP fragments will not be recorded properly.
tcpflow is based on the LBL Packet Capture Library and therefore supports the same rich filtering expressions that programs like 'tcpdump' support. tcpflow can also rebuild flows from data captured with 'tcpdump -w'.
=== TCPFLOW by Jeremy Elson <firstname.lastname@example.org> For the latest information on tcpflow, please see: http://www.circlemud.org/~jelson/software/tcpflow/ Or, subscribe to the tcpflow mailing lists; see http://sourceforge.net/mail/?group_id=8327 == What is tcpflow? tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is conve more»
Version 0.20 (February 26, 2001): * A bug was fixed that caused out-of-order reassembly to generate seemingly very large files on some systems (specifically, those that support fgetpos/fsetpos). * Bug fixed that caused the interface to be left in promiscuous mode after tcpflow terminated * The -r option was added, contributed by Jose M. Alcaide <email@example.com> * We now distribute tcpflow R more»
tcpflow(1) tcpflow 0.21 tcpflow(1) NAME tcpflow - TCP flow recorder SYNOPSIS tcpflow [-cCehpsv] [-b max_bytes] [-d debug_level] [-f max_fds] [-i iface] [-r file] [expression] DESCRIPTION tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is conveni more»
tcpflow (0.21.ds1-7) unstable; urgency=low * Switch to debhelper compat level 9, enable hardening more»
2003-08-07 Jeremy Elson <firstname.lastname@example.org> * Released v0.21. Sticking to my strict schedule more»
Original author and primary maintainer: Jeremy Elson <email@example.com> http://www.circlemu more»
tcpflow was packaged for Debian by Robert McQueen <firstname.lastname@example.org> on Sat, 29 Jul 2000 02:16:59 more»