Copyright (C) 2006-2007 Sourcefire Inc.  All Rights Reserved.

Author: Martin Roesch

This is a libpcap-based program.  It has two runtime modes:

1. 1)It sniffs packets and spools them straight to the disk and can daemonize itself for background packet logging.  By default the file rolls over when 1 GB of data is logged.
   

2. 2)It sniffs packets and rewrites them to a second interface, essentially acting as a soft tap.  It can also do this in daemon mode.
   

These two runtime modes are mutually exclusive, if the program is placed in tap mode (using the -I switch) then logging to disk is disabled.

License:

GPL v2.  Make SURE you read the included COPYING file so that you understand  how this file is licensed by Sourcefire, even though it's under the GPL v2 there are some clarifications that we have made regarding the licensing of this program.

Requirements:

1. *A recent version of libpcap.
   

2. *A recent version of libdnet.