# 使用 Homebrew 安装 tcpsplit

查看 tcpsplit 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:tcpsplit
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install tcpsplit
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:tcpsplit
- **软件包管理器:** Homebrew
- **版本:** 0.3
- **来源摘要:** Break a packet trace into some number of sub-traces
- **主页:** <https://www.icir.org/mallman/software/tcpsplit/>
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- tcpsplit (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.3
## 项目历史与用法

tcpsplit is a small libpcap trace utility from Mark Allman for splitting one packet trace into several smaller traces while keeping each TCP connection together. Its history is intentionally modest: it is a research-and-analysis helper rather than a broad platform.

### 项目历史

The official ICIR page presents tcpsplit as Mark Allman's utility for breaking large libpcap traces along TCP connection boundaries. The 0.3 README identifies the March 2025 release and says it was developed for MacOS and Linux, with libpcap as the required dependency.

### 采用历史

The supplied package metadata shows only a Homebrew package among the tracked package managers, which fits the tool's narrow role in packet-trace analysis. The author's homepage notes a new tcpsplit release in March 2025, so the project was still maintained for its niche even without broad packaging.

### 使用方式

The package is used when a packet trace is too large for detailed work or when analysis should be developed against a subset without splitting individual TCP flows across output files. The README documents deterministic splitting, prefix-based IPv4 and IPv6 classification, and a validation script to check that splitting did not lose data.

### 为什么软件包爱好者会关心

For package nerds, tcpsplit is the kind of single-purpose C utility that belongs near tcpdump and other pcap tools: it does one trace-management job and stays out of the way. Its value is less about popularity and more about preserving flow boundaries while making large captures tractable.

### 时间线

- March 2025: tcpsplit 0.3 released with refactoring, IPv6 support, Linux cooked SLL2 support, and prefix options.
- Package metadata: tracked as a Homebrew formula.

### Related projects

- libpcap is the required trace-file dependency; tcpdump-style pcap captures are the practical input; VLAN and Linux cooked capture formats appear in the official ChangeLog as supported trace concerns.

### 来源

- <https://www.icir.org/mallman/>
- <https://www.icir.org/mallman/software/tcpsplit/>
- <https://www.icir.org/mallman/software/tcpsplit/ChangeLog>
- input source_facts.package-manager


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals


## Combined YAML source

View the package source record on GitHub. [combined/tcpsplit.yml](https://github.com/mxcl/pkgdb/blob/main/combined/tcpsplit.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph