# tcpflow
# Extract and reassemble TCP streams from PCAP files into individual files
# Docs: https://docs.remnux.org/discover-the-tools/explore+network+interactions/monitoring

% network, tcp, stream-extraction

# Basic usage
tcpflow -r <capture.pcap> -o output/


# --- Recipes (multi-tool chains) ---

# >> Extract Files from Network Capture
# Carve files using signatures
tcpxtract -f <capture.pcap> -o carved/
# Extract individual TCP streams
tcpflow -r <capture.pcap> -o streams/
# Or use NetworkMiner for automated extraction
NetworkMiner --pcap <capture.pcap>