MAILSNARF(8) System Manager's Manual MAILSNARF(8)

mailsnarf - sniff mail messages in Berkeley mbox format

mailsnarf [-i interface | -p pcapfile] [[-v] pattern [expression]]

mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail(1), pine(1), etc.).

Specify the interface to listen on.
Process packets from the specified PCAP capture file instead of the network.
"Versus" mode. Invert the sense of matching, to select non-matching messages.
Specify regular expression for message header/body matching.
Specify a tcpdump(8) filter expression to select traffic to sniff.

dsniff(8), mail(1), pine(1)

Dug Song <>