I know I should have done this before it was uploaded to incoming by my sponsor, but I have packaged the program tcpflow, which is a tcpdump-esque packet catcher that uses libcap. It is different because it assembles each side of each TCP conversation, called a flow, in a file. It is available from http://www.circlemud.org/~jelson/software/tcpflow/ and is released under the GPL. Regards, Rob