# tcpxtract
# Carve files from network traffic using file signatures
# Docs: https://docs.remnux.org/discover-the-tools/explore+network+interactions/monitoring

% network, file-carving, pcap

# Basic usage
tcpxtract -f <capture.pcap> -o output/


# --- Recipes (multi-tool chains) ---

# >> Extract Files from Network Capture
# Carve files using signatures
tcpxtract -f <capture.pcap> -o carved/
# Extract individual TCP streams
tcpflow -r <capture.pcap> -o streams/
# Or use NetworkMiner for automated extraction
NetworkMiner --pcap <capture.pcap>