Man Linux: Main Page and Category List


       driftnet - capture images from network traffic and display them in an X
       window; optionally, capture audio streams and play them.


       driftnet [options] [filter code]


       Driftnet watches network traffic, and picks out and displays  JPEG  and
       GIF  images  for  display.  It  is  an horrific invasion of privacy and
       shouldn’t be used by anyone anywhere.  It  has  been  described  as  ‘a
       graphical  tcpdump(8)’,  ‘EtherPeg  for  Unix’, and called all sorts of
       nasty names by people on Freshmeat. It is also possible to use driftnet
       to  capture  MPEG  audio  data  from  the network and play it through a
       player such as mpg123(1).

       Images may be saved by clicking on them.


       -h     Print a summary of usage.

       -v     Print additional details of packets captured to the terminal.

       -i interface
              Listen to packets on interface. By default, driftnet will try to
              pick  up  traffic on all interfaces, but this does not work with
              all versions of pcap(3); on such systems, an interface  must  be
              specified.  On  some  systems, driftnet can only use promiscuous
              mode if an interface is specified.

       -p     Do not put the interface into promiscuous mode.

       -a     Operate in ‘adjunct mode’, where driftnet gathers images for use
              by another program, such as Jamie Zawinski’s webcollage. In this
              mode, no window is displayed; images are captured and saved in a
              temporary directory, and their names written on standard output.

       -m number
              In adjunct mode, silently drop images if  there  are  more  than
              number  in  the  temporary directory. It is assumed that another
              process will delete images which it has processed.

       -x prefix
              The filename prefix  to  use  when  saving  images,  by  default

       -d directory
              Use directory to store temporary files. Driftnet will clear this
              directory of its own temporary  files  on  exit,  but  will  not
              delete the directory or any other files.

       -s     Attempt  to  capture  streamed  audio data from the network, and
              either play it or, in adjunct mode, save it in files. At present
              this only works with MPEG data.

       -S     Capture streamed audio data only, ignoring images.

       -M command
              Use  the  named  command  to  play MPEG audio data. The command,
              which is executed using the shell, should accept MPEG frames  on
              standard input.  The default is ‘mpg123 -’.

       filter code
              Additional  filter code to restrict the packets captured, in the
              libpcap syntax. User  filter  code  is  evaluated  as  ‘tcp  and
              (filter code)’.


       tcpdump(8), pcap(3), webcollage(1), mpg123(1),,,


       Chris Lightfoot <>


       Driftnet, version 0.1.6.
       $Id:,v 1.5 2002/06/04 15:39:54 chris Exp $


       This program is free software; you can redistribute it and/or modify it
       under the terms of the GNU General Public License as published  by  the
       Free  Software Foundation; either version 2 of the License, or (at your
       option) any later version.

       This program is distributed in the hope that it  will  be  useful,  but
       WITHOUT   ANY   WARRANTY;   without   even   the  implied  warranty  of
       General Public License for more details.

       You should have received a copy of the GNU General Public License along
       with this program; if not, write to the Free Software Foundation, Inc.,
       675 Mass Ave, Cambridge, MA 02139, USA.