Oldie but goodie - tcpflow

[fugu]

I came across this neat piece of software that I thought Id share, it really works pretty well too. tcpflow is in the repos (apt-get install tcpflow). It's used to parse through those giant pcap files and extract out images and html and js and just about everything thats not encrypted. I've found it very useful to see where my websites are misbehaving and made it faster to correct them. One thing to note, Ive found it seems to not like the newer pcapng format so much and prefers the older pcap format.