On Sun, 25 Jan 2004, Robert Collins wrote:

> On Sun, 2004-01-25 at 21:12, Henrik Nordstrom wrote:
> > On Sat, 24 Jan 2004, Henrik Nordstrom wrote:
> >
> > > a) You need some kind of software capable of reassembling the TCP streams
> > > and pulling out the relevant HTTP request and resulting replies seen.

> IIRC, Driftnet.

Thanks, that was what I was thinking about for seeing the images!

And there is also the similar tools from dsniff which may be interesting
in these contexts, and also ofcourse ngrep for those more inclined on
looking at raw traffic.