macOS
Homebrewverifiziert · 100%
brew install tcpflowlocal Homebrew formula metadata
MacPortsverifiziert · 94%
sudo port install tcpflowMacPorts ports tree · net/tcpflow/Portfile · Quelle: api.github.com
brew / Rang 4421
tcpflow mit Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für tcpflow in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Linux
Alpine Linux apkverifiziert · 92%
sudo apk add tcpflowAlpine Linux edge package indexes · tcpflow · Quelle: dl-cdn.alpinelinux.org
Debian aptverifiziert · 92%
sudo apt install tcpflowDebian stable package indexes · tcpflow · Quelle: deb.debian.org
Fedora dnfverifiziert · 92%
sudo dnf install tcpflowFedora Rawhide package metadata · tcpflow · Quelle: dl.fedoraproject.org
Nixverifiziert · 92%
nix profile install nixpkgs#tcpflownixpkgs package indexes · pkgs/by-name/tc/tcpflow/package.nix · Quelle: api.github.com
Arch Linux pacmanverifiziert · 92%
sudo pacman -S tcpflowArch Linux sync databases · tcpflow · Quelle: geo.mirror.pkgbuild.com
openSUSE zypperverifiziert · 92%
sudo zypper install tcpflowopenSUSE Tumbleweed package metadata · tcpflow · Quelle: download.opensuse.org
Überblick
Paketzusammenfassung
TCP/IP packet demultiplexer
Projektlinks
Befehle und Aliase
- tcpflow
Verlauf
Projektgeschichte und Nutzung
tcpflow is a packet-capture and TCP stream reassembly tool that writes each reconstructed flow to files for protocol analysis, debugging, and network forensics.
Projektgeschichte
The upstream README says Jeremy Elson originally wrote tcpflow to capture data sent by programs using undocumented network protocols, including streaming media and instant messaging applications, so those protocols could be reverse engineered.
The README also records that Simson Garfinkel later took over maintenance after leaving Sandstorm Enterprises and needing a TCP flow reassembly program. The public GitHub repository was created in 2012 and continues as the upstream development home.
Adoptionsgeschichte
tcpflow's README states that most common GNU/Linux distributions ship it in their repositories, and the input package facts show it packaged by Homebrew and major Linux and Unix package systems.
Its niche adoption follows from doing something adjacent to tcpdump and Wireshark but more file-oriented: reconstructing application byte streams into separate artifacts that can be inspected after capture.
Wie es verwendet wird
Common usage is to capture live traffic or read stored tcpdump packet flows, split each TCP direction into a named file, and optionally post-process HTTP responses into headers and bodies.
The README positions it for understanding network packet flows, protocol debugging, malware analysis from HTTP sessions, and forensic workflows.
Warum Paket-Nerds sich dafür interessieren
Package nerds care because tcpflow sits in the pcap toolchain but exposes a different abstraction: not packets, but reconstructed conversations. That makes it useful as a small dependency-free-ish CLI companion to tcpdump in forensic and debugging toolboxes.
It is also a packaging case study in older network tooling modernized over time, with libpcap, OpenSSL/zlib-style dependencies, autotools, CMake notes, RPM building instructions, and active distribution packaging all visible in upstream docs.
Zeitleiste
- 1998: Sandstorm Enterprises founded, later producing related commercial TCP flow tools TCPDEMUX and NetIntercept.
- 2012: simsong/tcpflow GitHub repository created.
- 2013: Upstream README recommends citing the Naval Postgraduate School technical report on tcpflow.
- 2020: Maintainer status report describes porting tcpflow and related libraries to modern C++.
Related projects
- tcpdump and libpcap are related because tcpflow can process tcpdump packet flows and uses the LBL Packet Capture Library.
- Wireshark is mentioned upstream as a contrasting packet analyzer; TCPDEMUX and NetIntercept are named as related commercial flow tools.
Quellen
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Installiert mit 1 Laufzeitabhängigkeiten.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
tcpflow | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-08-04
Manager-Version1.6.1
Manager aktualisiert
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/simsong/tcpflow
- InfoNo package-manager update timestamp was available.niedrig Konfidenz
- InfoNo cached GitHub release or tag data was available.https://github.com/simsong/tcpflownone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:tcpflow |
|---|---|
| Version | 1.6.1 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/tcpflow |
| Homepage | https://github.com/simsong/tcpflow |
| Repository | https://github.com/simsong/tcpflow |
| Lizenz | GPL-3.0-only |
| Quellarchiv | https://corp.digitalcorpora.org/downloads/tcpflow/tcpflow-1.6.1.tar.gz |
| Abhängigkeiten | openssl@4 |
| Build-Abhängigkeiten | boost |
| Von macOS bereitgestellte Bibliotheken | bzip2, libpcap |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | tcpflow |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Debian apt95%
tcpflow 1.6.1-3+b1
TCP flow recorder
https://github.com/simsong/tcpflow
sudo apt install tcpflow- Section: net
- Architecture: amd64
- Source Package: tcpflow
- 8 Abhängigkeiten
- 1 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Tcpflow
Debian apt95%
tcpflow-nox 1.6.1-3+b1
TCP flow recorder - version without X11 dependencies
https://github.com/simsong/tcpflow
sudo apt install tcpflow-nox- Section: net
- Architecture: amd64
- Source Package: tcpflow
- 7 Abhängigkeiten
- 1 stellt bereit
- 1 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Tcpflow
Nix95%
tcpflow
nix profile install nixpkgs#tcpflow- normalized package name match
- Abgeglichen nach: Tcpflow
Ubuntu apt95%
tcpflow 1.6.1-3build2
TCP flow recorder
https://github.com/simsong/tcpflow
sudo apt install tcpflow- Section: universe/net
- Architecture: amd64
- 8 Abhängigkeiten
- 1 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Tcpflow
Ubuntu apt95%
tcpflow-nox 1.6.1-3build2
TCP flow recorder - version without X11 dependencies
https://github.com/simsong/tcpflow
sudo apt install tcpflow-nox- Section: universe/net
- Architecture: amd64
- Source Package: tcpflow
- 7 Abhängigkeiten
- 1 stellt bereit
- 1 optionale Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Tcpflow
apk95%
tcpflow 1.6.1-r14
A Tool for monitoring, capturing and storing TCP connections flows
https://github.com/simsong/tcpflow
sudo apk add tcpflow- License: GPL-3.0-only
- Architecture: x86_64
- Source Package: tcpflow
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Tcpflow
apk95%
tcpflow-doc 1.6.1-r14
A Tool for monitoring, capturing and storing TCP connections flows (documentation)
https://github.com/simsong/tcpflow
sudo apk add tcpflow-doc- License: GPL-3.0-only
- Architecture: x86_64
- Source Package: tcpflow
- normalized package name match
- Abgeglichen nach: Tcpflow
dnf95%
tcpflow 1.6.2-0.3.8d47b53.fc45
Network traffic recorder
https://github.com/simsong/tcpflow
sudo dnf install tcpflow- License: GPL-1.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: tcpflow
- 9 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Tcpflow
pacman95%
tcpflow 1.6.1-2
Captures data transmitted as part of TCP connections then stores the data conveniently
https://github.com/simsong/tcpflow
sudo pacman -S tcpflow- License: GPL
- Architecture: x86_64
- 4 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Tcpflow
zypper95%
tcpflow 1.6.1-2.17
Program for capturing and collecting TCP streams
https://github.com/simsong/tcpflow
sudo zypper install tcpflow- License: GPL-3.0-or-later
- Category: Productivity/Networking/Diagnostic
- Architecture: x86_64
- Source Package: tcpflow
- 6 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Tcpflow
MacPorts95%
tcpflow
sudo port install tcpflow- normalized package name match
- Abgeglichen nach: Tcpflow
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation