I am always amazed at how many people have heard of tcpdump but how few seem to have heard of tcpflow https://linux.die.net/man/1/tcpflow https://linux.die.net

I am always amazed at how many people have heard of tcpdump but how few seem to have heard of tcpflow https://linux.die.net/man/1/tcpflow https://linux.die.net/man/1/tcpflow If you are looking to do TCP level protocol analysis it is one of the simplest and easiest linux command line tools out there. It's biggest strength is that it can take a payload split over multiple packets and spit it out as a file with the whole payload