| Description: | tcpxtract is a tool for extracting files from network traffic based on
file signatures.
tcpxtract features the following:
* Supports 26 popular file formats out-of-the-box. New formats can be
added by simply editing its config file.
* With a quick conversion, you can use your old Foremost config file
with tcpxtract.
* Custom written search algorithm is lightning fast and very scalable.
* Search algorithm searches across packet boundries for total coverage
and forensic quality.
* Uses libpcap, a popular, portable and stable library for network data
capture
* Can be used against a live network or a tcpdump formatted capture file. |
|---|