DRIFTNET(1) DRIFTNET(1) NAME driftnet - capture images from network traffic and display them in an X window; optionally, capture audio streams and play them. SYNOPSIS driftnet [options] [filter code] DESCRIPTION Driftnet watches network traffic, and picks out and dis- plays JPEG and GIF images for display. It is an horrific invasion of privacy and shouldn't be used by anyone any- where. It has been described as `a graphical tcpdump(8)', `EtherPeg for Unix', and called all sorts of nasty names by people on Freshmeat. It is also possible to use drift- net to capture MPEG audio data from the network and play it through a player such as mpg123(1). Images may be saved by clicking on them. OPTIONS -h Print a summary of usage. -v Print additional details of packets captured to the terminal. -i interface Listen to packets on interface. By default, drift- net will try to pick up traffic on all interfaces, but this does not work with all versions of pcap(3); on such systems, an interface must be specified. On some systems, driftnet can only use promiscuous mode if an interface is specified. -p Do not put the interface into promiscuous mode. -a Operate in `adjunct mode', where driftnet gathers images for use by another program, such as Jamie Zawinski's webcollage. In this mode, no window is displayed; images are captured and saved in a tem- porary directory, and their names written on stan- dard output. -m number In adjunct mode, silently drop images if there are more than number in the temporary directory. It is assumed that another process will delete images which it has processed. -x prefix The filename prefix to use when saving images, by default `driftnet-'. -d directory Use directory to store temporary files. Driftnet will clear this directory of its own temporary files on exit, but will not delete the directory or any other files. -s Attempt to capture streamed audio data from the network, and either play it or, in adjunct mode, save it in files. At present this only works with MPEG data. -S Capture streamed audio data only, ignoring images. -M command Use the named command to play MPEG audio data. The command, which is executed using the shell, should accept MPEG frames on standard input. The default is `mpg123 -'. filter code Additional filter code to restrict the packets cap- tured, in the libpcap syntax. User filter code is evaluated as `tcp and (filter code)'. SEE ALSO tcpdump(8), pcap(3), webcollage(1), mpg123(1), http://www.etherpeg.org/, http://freshmeat.net/projects/driftnet/, http://www.ex-parrot.com/~chris/driftnet/. AUTHOR Chris Lightfoot <chris@ex-parrot.com> VERSION Driftnet, version 0.1.6. $Id: driftnet.1.in,v 1.5 2002/06/04 15:39:54 chris Exp $ COPYING This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 1