software

Today I found tcpxtract. It can be used with capture files or interfaces to sniff all kinds of files in a network. The nice feature of tcpxtract is that it will save the captured data to files. The disadvantage is that it doesn't keep the orginal filenames and saves them with numbered names.

It identifies the files via signatures which can be easily added for new file types in a configuration file but it supports 25 file types out of the box. Like most of the network analysis tools under Linux it uses the libpcap.
[via: onlamp]