3 ms·

How does tcpflow compare with ngrep?

• tedunangst 16y ago
  tcpflow is rather simpler, but probably a lot better for examining multiple connections. You specify a tcpdump/pcap filter and it saves the traffic to files (two per connection, one for each direction). You review the data at your leisure, it's not all jumbled up in your terminal.
  • nailer 16y ago
    Can tcpflow set up fake TLS certificates like Charles?
    • tedunangst 16y ago
      No. It takes data from the network and puts it into files. That's all. It doesn't inject, interpret, or decrypt data.