NAME

tcprebuild - uses TCP::Rebuild to reconstruct TCP streams to files on disk

SYNOPSIS

tcprebuild [options]

Options
  -i --infile     - input pcap file (required)
  -f --filter     - pcap capture filter (see tcpdump manpage)
  -s --separator  - print a separator between packets
  -h              - print help and exit
  -v              - print version and exit

DESCRIPTION

This utility takes data from pcap files and rebuilds it using libnids (via. Net::LibNIDS) before saving to disk.

TO DO

• Implement --files-from (including - for STDIN) to rebuild multiple files at once

SEE ALSO

The programs tcpick and tcpflow, which do a similar thing to this Perl utility

AUTHORS

David Cannings, <david@edeca.net>

This code was copyrighted in 2010, and is released under the same terms as Perl itself.