EtherPEG 1.0 Description:
EtherPEG displays all of the GIF and JPEG images that are being transferred on your network. This is especially fun for viewing the images that come from visited webpages on a AirPort wireless network. It works by capturing unencrypted TCP packets off your local network, collecting packets into groups based on TCP connection (determined from source IP address, destination IP address, source TCP port and destination TCP port), reassembling those packets into order based on TCP sequence number, and then scanning the resulting data for byte sequences that suggest the presence of JPEG or GIF data. EtherPEG works with any TCP/IP network, including Ethernet networks and wireless networks like AirPort, as long as the data is not encrypted. If the data is encrypted using IPSEC, or Virtual Private Network (VPN) products like PGPNet, or Web Browser SSL encryption, then third-parties cannot view your data. The source code is included in the download. It was featured at the MacHack 2000 conference.