MAILSNARF(8)						      System Manager's Manual						      MAILSNARF(8)

NAME
mailsnarf - sniff mail messages in Berkeley mbox format SYNOPSIS
mailsnarf [-i interface | -p pcapfile] [[-v] pattern [expression]] DESCRIPTION
mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail(1), pine(1), etc.). OPTIONS
-i interface Specify the interface to listen on. -p pcapfile Process packets from the specified PCAP capture file instead of the network. -v "Versus" mode. Invert the sense of matching, to select non-matching messages. pattern Specify regular expression for message header/body matching. expression Specify a tcpdump(8) filter expression to select traffic to sniff. SEE ALSO
dsniff(8), mail(1), pine(1) AUTHOR
Dug Song <dugsong@monkey.org> MAILSNARF(8)