tcpxtract

Carve files out of network traffic by signature.

$ sudo tcpxtract -f capture.pcap -o out/
$ sudo tcpxtract -d eth0 -o out/