tcpdump for sniffing POP3 -- methods ?

[freebsd at celestial.com (Bill Campbell)]

On Tue, Apr 13, 2004, Adam Maloney wrote:
>I've done this in the past.  I had tcpdump spitting out all the dst port
>110 packets to a file.  Then a perl script with Net::TCPDump (or
>whatever it's called) to parse it.

The tcpflow program makes this far easier as it separates each
connection out into its own file.  The command line options for
tcpflow are about the same as tcpdump.

Bill
--
INTERNET:   bill_(_at_)_Celestial_(_dot_)_COM  Bill Campbell; Celestial Software LLC
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

It's very glamorous to raise millions of dollars, until it's time for the
venture capitalist to suck your eyeballs out.
		-- Peter Kennedy, chairman of Kraft & Kennedy.