Personal tools
Skip to content. | Skip to navigation
tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis.
tcpick is a textmode sniffer that can track tcp streams and saves the data captured in files or displays them in the terminal. Useful for picking files in a passive way. It can store all connections in different files, or it can display all the stream on the terminal. It is useful to keep track of what users of a network are doing, and is usable with textmode tools like grep, sed and awk. It can handle eth and ppp interfaces.
TCPreen is a simple tool to monitor and analyze data transmitted between clients and servers through connection-oriented streams data such as a TCP sessions; it supports TCP over either IPv4 or IPv6. This tool focuses on the data stream (software/socket layer), not on the lower level transmission protocol as packet sniffers do.
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information about capture files.
TCPtraceroute is a traceroute implementation using TCP packets. The problem is that with the widespread use of firewalls on the modern Internet, many of the packets that the conventional traceroute(8) sends out (ICMP echo or UDP) end up being filtered, making it impossible to completely trace the path to the destination. By sending out TCP SYN packets instead of UDP or ICMP ECHO packets, tcptraceroute is able to bypass the most common firewall filters.
tcpxtract is a tool for extracting files from network traffic based on file signatures. tcpxtract features the following: * Supports 26 popular file formats out-of-the-box. New formats can be added by simply editing its config file. * With a quick conversion, you can use your old Foremost config file with tcpxtract. * Custom written search algorithm is lightning fast and very scalable. * Search algorithm searches across packet boundries for total coverage and forensic quality. * Uses libpcap, a popular, portable and stable library for network data capture * Can be used against a live network or a tcpdump formatted capture file.
Tcsh is an enhanced but completely compatible version of csh, the C shell. Tcsh is a command language interpreter which can be used both as an interactive login shell and as a shell script command processor. Tcsh includes a command line editor, programmable word completion, spelling correction, a history mechanism, job control and a C language like syntax.