Scroll to navigation

MAILSNARF(8) System Manager's Manual MAILSNARF(8)

NAME

mailsnarf - sniff mail messages in Berkeley mbox format

SYNOPSIS


mailsnarf [-i interface | -p pcapfile] [[-v] pattern [expression]]

DESCRIPTION


mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail(1), pine(1), etc.).

OPTIONS

Specify the interface to listen on.
Process packets from the specified PCAP capture file instead of the network.
"Versus" mode. Invert the sense of matching, to select non-matching messages.
Specify regular expression for message header/body matching.
Specify a tcpdump(8) filter expression to select traffic to sniff.

SEE ALSO

dsniff(8), mail(1), pine(1)

AUTHOR

Dug Song <dugsong@monkey.org>