home | help
DRIFTNET(1)		     General Commands Manual		     DRIFTNET(1)

NAME
     driftnet  -  capture  images  from network traffic and display them in an X
     window; optionally, capture audio streams and play them.

SYNOPSIS
     driftnet [options] [filter code]

DESCRIPTION
     Driftnet watches network traffic, and picks out and displays JPEG	and  GIF
     images  for display. It is an horrific invasion of privacy and shouldn't be
     used by anyone anywhere. It has been described as `a graphical tcpdump(8)',
     `EtherPeg for Unix', and called all sorts	of  nasty  names  by  people  on
     Freshmeat.  It  is also possible to use driftnet to capture MPEG audio data
     from the network and play it through a player such as mpg123(1).

     Images may be saved by clicking on them.

OPTIONS
     -h     Print a summary of usage.

     -v     Print additional details of packets captured to the terminal.

     -D     Print debug details to the terminal.

     -b     Beep when a new image is displayed.

     -i interface
	    Listen to packets on interface. By default,  driftnet  will  try  to
	    pick  up  traffic on all interfaces, but this does not work with all
	    versions of pcap(3); on such systems, an interface	must  be  speci-
	    fied.  On some systems, driftnet can only use promiscuous mode if an
	    interface is specified.

     -f file
	    Instead of listening on an interface, read captured packets  from  a
	    pcap(3);  dump file; file can be a named pipe for use with Kismet or
	    similar.

     -p     Do not put the interface into promiscuous mode.

     -a     Operate in `adjunct mode', where driftnet gathers images for use  by
	    another  program, such as Jamie Zawinski's webcollage. In this mode,
	    no window is displayed; images are captured and saved in a temporary
	    directory, and their names written on standard output.

     -m number
	    In adjunct mode, silently drop images if there are more than  number
	    in	the temporary directory. It is assumed that another process will
	    delete images which it has processed.

     -x prefix
	    The filename prefix to use when saving images,  by	default  `drift-
	    net-'.

     -d directory
	    Use directory to store temporary files. Driftnet will clear this di-
	    rectory  of its own temporary files on exit, but will not delete the
	    directory or any other files.

     -s     Attempt to capture streamed audio data from the network, and  either
	    play  it or, in adjunct mode, save it in files. At present this only
	    works with MPEG data.

     -S     Capture streamed audio data only, ignoring images and text.

     -t     Attempt to capture text data from the network, and	output	then  in
	    stdout.  At present this supports HTTP request only.

     -T     Capture text data only, ignoring images and audio.

     -M command
	    Use the named command to play MPEG audio data. The command, which is
	    executed  using the shell, should accept MPEG frames on standard in-
	    put.  The default is `mpg123 -'.

     -Z username
	    Drop privileges to user username after starting pcap.

     -l     List the system capture interfaces.

     -r     Put the interface in monitor mode (not supported on all interfaces).

     -g     Enable GTK display (this is the default).

     -w     Enable the HTTP server to display images.

     -W     Port number for the HTTP server (implies -w). Default: 9090.

     filter code
	    Additional filter code to restrict	the  packets  captured,  in  the
	    libpcap  syntax.  User  filter code is evaluated as `tcp and (filter
	    code)'.

     -y miliseconds
	    If offline mode, use miliseconds delay between packets.

     SEE ALSO
	    tcpdump(8), pcap(3), webcollage(1), mpg123(1),
	    http://www.etherpeg.org/,
	    http://freshmeat.net/projects/driftnet/,
	    http://www.ex-parrot.com/~chris/driftnet/.

AUTHOR
     Chris Lightfoot <chris@ex-parrot.com>
     David SuA!rez <david.sephirot@gmail.com>

1.6.0
     Driftnet, version 1.6.0.
     $Id: driftnet.1.in,v 1.7 2004/04/26 14:42:36 chris Exp $

COPYING
     This program is free software; you can redistribute it and/or modify it un-
     der the terms of the GNU General Public License as published  by  the  Free
     Software  Foundation;  either version 2 of the License, or (at your option)
     any later version.

     This program is distributed in the hope that it will be useful, but WITHOUT
     ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or  FIT-
     NESS  FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
     details.

     You should have received a copy of the GNU  General  Public  License  along
     with this program; if not, write to the Free Software Foundation, Inc., 675
     Mass Ave, Cambridge, MA 02139, USA.

								     DRIFTNET(1)

home | help