tcprebuild - uses TCP::Rebuild to reconstruct TCP streams to files on disk
tcprebuild [options] Options -i --infile - input pcap file (required) -f --filter - pcap capture filter (see tcpdump manpage) -s --separator - print a separator between packets -h - print help and exit -v - print version and exit
This utility takes data from pcap files and rebuilds it using libnids (via. Net::LibNIDS) before saving to disk.
Implement --files-from (including - for STDIN) to rebuild multiple files at once
The programs tcpick and tcpflow, which do a similar thing to this Perl utility
David Cannings, <david@edeca.net>
This code was copyrighted in 2010, and is released under the same terms as Perl itself.
To install TCP::Rebuild, copy and paste the appropriate command in to your terminal.
cpanm
cpanm TCP::Rebuild
CPAN shell
perl -MCPAN -e shell install TCP::Rebuild
For more information on module installation, please visit the detailed CPAN module installation guide.