## Based on SourceCode
> curl -sL http://www.zlib.net/zlib-1.2.11.tar.gz -O
> curl -sL http://www.tcpdump.org/release/libpcap-1.8.1.tar.gz -O
> tar zxvf libpcap-1.8.1.tar.gza
> tar zxvf zlib-1.2.11.tar.gz
> cd libpcap-1.8.1 && ./configure && make && make install && cd ..
> cd zlib-1.2.11 && ./configure && make && make install && cd ..
# Or
## On CentOS
yum install libpcap-devel zlib-devel
## On Ubuntu
apt-get install libpcap-dev zlib1g-dev
## On Darwin
### do nothing
- build httpflow
> git clone https://github.com/six-ddc/httpflow
> cd httpflow && make && make install
or directly download Release binary file.
> httpflow -h
libpcap version 1.3.0
httpflow 0.0.1
Usage: httpflow [-i interface] [-f filter] [-r pcap-file] [-w output-path] [-x pipe-line] [-s snapshot-length]
- Capture default interface
> httpflow
- Capture all interfaces
> httpflow -i any
- Use the expression to filter the capture results
# If no expression is given, all packets on the net will be dumped.
# For the expression syntax, see pcap-filter(7).
> httpflow -f 'tcp port 80 and host baidu.com'
- Read packets from file
# tcpdump -w a.cap
> httpflow -r a.cap