DOKK / manpages / debian 12 / dsniff / mailsnarf.8.en
MAILSNARF(8) System Manager's Manual MAILSNARF(8)

mailsnarf - sniff mail messages in Berkeley mbox format



mailsnarf [-i interface | -p
    pcapfile] [[-v] pattern [expression]]










mailsnarf outputs e-mail messages sniffed from SMTP and POP
    traffic in Berkeley mbox format, suitable for offline browsing with your
    favorite mail reader (mail(1), pine(1), etc.).









  

  
Specify the interface to listen on.

  

  
Process packets from the specified PCAP capture file instead of the
      network.

  

  
"Versus" mode. Invert the sense of matching, to select
      non-matching messages.

  

  
Specify regular expression for message header/body matching.

  

  
Specify a tcpdump(8) filter expression to select traffic to sniff.










dsniff(8), mail(1), pine(1)








Dug Song <dugsong@monkey.org>