Chaosreader is "a freeware tool that can trace HTTP sessions from a packet log, displaying which bits are plaintexts. It could be used to help verify that some websites really do utilize encryption. It has been written on Solaris using Perl".
The above description is one use of Chaosreader, it has many features. It takes a snoop (or tcpdump) log and parses every protocol it can. This includes,
* Any TCP Session
* Any UDP Stream
* HTTP transfers (HTML, JPG, GIF, zip, ...)
* FTP files (active transfers)
* telnet sessions (also generates real-time playback scripts)
* SMTP emails
* ...
