Linux command
driftnet 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Capture images
driftnet -i [eth0]
Save images to
driftnet -i [eth0] -d [/tmp/images]
Capture without display
driftnet -i [eth0] -a -d [/tmp/images]
Read from pcap
driftnet -f [capture.pcap]
Verbose output
driftnet -v -i [eth0]
说明
driftnet captures and displays images from network traffic in real-time. It extracts JPEG, GIF, and PNG images transmitted over unencrypted HTTP connections passing through the monitored network interface. The tool is useful for network monitoring, security demonstrations, and forensics. In display mode, captured images appear in a window; in adjunct mode, they're saved to disk. driftnet can also extract audio data from network streams, playing it in real-time or saving to files.
参数
- -i _INTERFACE_
- Network interface to capture on.
- -d _DIR_
- Directory to save images.
- -a
- Adjunct mode (no display).
- -f _FILE_
- Read from pcap file.
- -p
- Don't put interface in promiscuous mode.
- -v
- Verbose mode.
- -b
- Beep when image captured.
- --help
- Display help information.
FAQ
What is the driftnet command used for?
driftnet captures and displays images from network traffic in real-time. It extracts JPEG, GIF, and PNG images transmitted over unencrypted HTTP connections passing through the monitored network interface. The tool is useful for network monitoring, security demonstrations, and forensics. In display mode, captured images appear in a window; in adjunct mode, they're saved to disk. driftnet can also extract audio data from network streams, playing it in real-time or saving to files.
How do I run a basic driftnet example?
Run `driftnet -i [eth0]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -i _INTERFACE_ do in driftnet?
Network interface to capture on.