[edit: I actually misread your question. We don't at the moment have reassembly of HTTP flows from pcaps in base, but there's an external project that does this

[edit: I actually misread your question. We don't at the moment have reassembly of HTTP flows from pcaps in base, but there's an external project that does this. As another comment noted, transparent mode is probably still your best bet. https://github.com/cjneasbi/mitmextract https://github.com/cjneasbi/mitmextract] Yes, it's very similar to tcpdump in this respect. You can write flows to disk like this: mitmdump -w outfile And then read them back: mitmdump -r outfile All the standard options for modifying, replaying and filtering are available when you read saved flows. So you could do this: mitmdump -r outfile -s foo.py -w newfile Which will read flows from file, run the script foo.py over each flow as its read (which can then modify them arbitrarily), and then write the result to newfile.