MAILSNARF(8)                System Manager's Manual               MAILSNARF(8)


NAME
       mailsnarf - sniff mail messages in Berkeley mbox format

SYNOPSIS
       mailsnarf [-i interface | -p pcapfile] [[-v] pattern [expression]]

DESCRIPTION
       mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in
       Berkeley mbox format, suitable for offline browsing with your favorite
       mail reader (mail(1), pine(1), etc.).

OPTIONS
       -i interface
              Specify the interface to listen on.

       -p pcapfile
              Process packets from the specified PCAP capture file instead of
              the network.

       -v     "Versus" mode. Invert the sense of matching, to select non-
              matching messages.

       pattern
              Specify regular expression for message header/body matching.

       expression
              Specify a tcpdump(8) filter expression to select traffic to
              sniff.

SEE ALSO
       dsniff(8), mail(1), pine(1)

AUTHOR
       Dug Song <dugsong@monkey.org>

                                                                  MAILSNARF(8)