使用 Homebrew 安装 tcpsplit

项目链接

• 主页

命令和别名

• tcpsplit

项目历史

The official ICIR page presents tcpsplit as Mark Allman's utility for breaking large libpcap traces along TCP connection boundaries. The 0.3 README identifies the March 2025 release and says it was developed for MacOS and Linux, with libpcap as the required dependency.

采用历史

The supplied package metadata shows only a Homebrew package among the tracked package managers, which fits the tool's narrow role in packet-trace analysis. The author's homepage notes a new tcpsplit release in March 2025, so the project was still maintained for its niche even without broad packaging.

使用方式

The package is used when a packet trace is too large for detailed work or when analysis should be developed against a subset without splitting individual TCP flows across output files. The README documents deterministic splitting, prefix-based IPv4 and IPv6 classification, and a validation script to check that splitting did not lose data.

为什么软件包爱好者会关心

For package nerds, tcpsplit is the kind of single-purpose C utility that belongs near tcpdump and other pcap tools: it does one trace-management job and stays out of the way. Its value is less about popularity and more about preserving flow boundaries while making large captures tractable.

时间线

• March 2025: tcpsplit 0.3 released with refactoring, IPv6 support, Linux cooked SLL2 support, and prefix options.
• Package metadata: tracked as a Homebrew formula.

Related projects

• libpcap is the required trace-file dependency; tcpdump-style pcap captures are the practical input; VLAN and Linux cooked capture formats appear in the official ChangeLog as supported trace concerns.

来源

• https://www.icir.org/mallman/
• https://www.icir.org/mallman/software/tcpsplit/
• https://www.icir.org/mallman/software/tcpsplit/ChangeLog
• input source_facts.package-manager