# Install httpflow with Homebrew

Packet capture and analysis utility similar to tcpdump for HTTP. Version 0.0.9 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:httpflow
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install httpflow
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:httpflow
- **Package manager:** Homebrew
- **Version:** 0.0.9
- **Source summary:** Packet capture and analysis utility similar to tcpdump for HTTP
- **Homepage:** <https://github.com/six-ddc/httpflow>
- **Repository:** <https://github.com/six-ddc/httpflow>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- httpflow (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 0.0.9
## Project history and usage

httpflow is a small command-line packet capture utility for dumping HTTP request and response streams from live interfaces or saved pcap data.

### Project history

The GitHub repository was created in 2017 and describes the project as a command-line utility for capturing and dumping HTTP streams. Its README presents version 0.0.9 in the usage text and documents release binaries alongside source builds.

### Adoption history

The project is packaged by Homebrew in this batch and documents Homebrew installation in its own README. Linux use is framed as a source build against zlib, libpcap, and PCRE.

### How it is used

httpflow can listen on an interface, read packets from a pcap file, accept tcpdump-style capture expressions, filter URLs with a regular expression, read packet data from standard input, and write captured HTTP request and response data to a directory.

### Why package nerds care

The package is interesting as a focused bridge between packet capture tooling and HTTP debugging: less general than Wireshark or tshark, but easier to script when the desired artifact is the HTTP stream itself.

### Timeline

- 2017: The public GitHub repository was created.
- 2017: Tag 0.0.1 points at a February 25 commit.
- 2020: Tag 0.0.9 points at a May 7 commit.

### Related projects

- Related tools include tcpdump, libpcap, pcap-filter, Wireshark, tshark, and other HTTP-specific capture utilities.

### Sources

- <https://api.github.com/repos/six-ddc/httpflow>
- <https://api.github.com/repos/six-ddc/httpflow/tags>
- <https://github.com/six-ddc/httpflow>
- <https://raw.githubusercontent.com/six-ddc/httpflow/master/README.md>


## Security Notes

broad file, network, media, or database tool signal. escape, surveillance, or offensive capability signal.

- **Geiger risk:** red / medium
- broad file, network, media, or database tool signal
- escape, surveillance, or offensive capability signal


## Combined YAML source

View the package source record on GitHub. [combined/httpflow.yml](https://github.com/mxcl/pkgdb/blob/main/combined/httpflow.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph