mailsnarf - sniff mail messages in Berkeley mbox format

       Dug Song <dugsong@monkey.org>

                                                                                                    MAILSNARF(8)

mailsnarf outputs e-mail messages sniffed from SMTP and POP traffic in Berkeley mbox format, suitable for
       offline browsing with your favorite mail reader (mail(1), pine(1), etc.).

       mailsnarf - sniff mail messages in Berkeley mbox format

-iinterface
              Specify the interface to listen on.

       -ppcapfile
              Process packets from the specified PCAP capture file instead of the network.

       -v     "Versus" mode. Invert the sense of matching, to select non-matching messages.

       pattern
              Specify regular expression for message header/body matching.

       expression
              Specify a tcpdump(8) filter expression to select traffic to sniff.

dsniff(8), mail(1), pine(1)

mailsnarf [-iinterface | -ppcapfile] [[-v] pattern[expression]]