mailsnarf(8)

mailsnarf8

Sniff mail messages in berkeley mbox format

Usage

mailsnarf [{-i interface | -p pcapfile}] [[-v] pattern [expression]]

Overview

mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for offline browsing with your favorite mail reader (mail(1), pine(1), etc.).

Options

-i interface

Specify the interface to listen on.

-p pcapfile

Process packets from the specified PCAP capture file instead of the network.

-v

"Versus" mode. Invert the sense of matching, to select non-matching messages.

pattern

Specify regular expression for message header/body matching.

expression

Specify a tcpdump(8) filter expression to select traffic to sniff.

Releases

12 releases since Debian 3.1 (Sarge); the text changed 1 time.

  1. 3.1
  2. 4.0–Arch

-p since Debian 4.0 (Etch).

Author

Dug Song <[email protected]>

From dsniff 2.4b1-34 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.