brew update
brew install httpflow
## On CentOS
yum update
yum install libpcap-devel zlib-devel
## On Ubuntu / Debian
apt-get update
apt-get install libpcap-dev zlib1g-dev
- Building httpflow
> git clone https://github.com/six-ddc/httpflow
> cd httpflow && make && make install
or directly download Release binary file.
> httpflow -h
libpcap version 1.3.0
httpflow 0.0.1
Usage: httpflow [-i interface] [-f filter] [-r pcap-file] [-w output-path] [-x pipe-line] [-s snapshot-length]
- Capture default interface
> httpflow
- Capture all interfaces
> httpflow -i any
- Use the expression to filter the capture results
# If no expression is given, all packets on the net will be dumped.
# For the expression syntax, see pcap-filter(7).
> httpflow -f 'tcp port 80 and host baidu.com'
- Read packets from file
# tcpdump -w a.cap
> httpflow -r a.cap