NAME

mailsnarf - sniff mail messages in Berkeley mbox format

SYNOPSIS

mailsnarf [-i interface | -p pcapfile] [[-v] pattern [expression]]

DESCRIPTION

mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail(1), pine(1), etc.).

OPTIONS

-i interface

Specify the interface to listen on.

-p pcapfile

Process packets from the specified PCAP capture file instead of the network.

-v

"Versus" mode. Invert the sense of matching, to select non-matching messages.

pattern

Specify regular expression for message header/body matching.

expression

Specify a tcpdump(8) filter expression to select traffic to sniff.

SEE ALSO

dsniff(8), mail(1), pine(1)

AUTHOR

Dug Song <dugsong@monkey.org>