# networkminer # Passive network traffic analyzer — extracts files, images, credentials from PCAP captures % network, pcap, file-carving, passive # Basic usage NetworkMiner --pcap # --- Recipes (multi-tool chains) --- # >> Extract Files from Network Capture # Carve files using signatures tcpxtract -f -o carved/ # Extract individual TCP streams tcpflow -r -o streams/ # Or use NetworkMiner for automated extraction NetworkMiner --pcap