Eavesdropping aid- takes tcpdump raw packets, extracts http requests & responses, includes headers, transferred files