tcpxtract

tcpxtract is a tool for extracting files from network traffic based on file signatures. tcpxtract features the following: * Supports 26 popular file formats out-of-the-box. New formats can be added by simply editing its config file. * With a quick conversion, you can use your old Foremost config file with tcpxtract. * Custom written search algorithm is lightning fast and very scalable. * Search algorithm searches across packet boundries for total coverage and forensic quality. * Uses libpcap, a popular, portable and stable library for network data capture * Can be used against a live network or a tcpdump formatted capture file.

Releases Overview