TFTPgrab is a TFTP (Trivial File Transfer Protocol) stream extractor. It reads from tcpdump/libpcap capture files and attempts to reconstruct data that has been transferred via TFTP. It may be useful in some network forensics situations. See the README in the distribution for more information. It is distributed under the revised BSD license.
TFTPgrab should compile on modern UNIX systems that have libpcap available. Currently, no attempt has been made to port to Win32.
Download:
tftpgrab-extras contains a TFTP server and client written in Ruby. These are some testing utilities that I put together to help in my development of TFTPgrab. There weren't many good, simple TFTP servers/clients available in Ruby (or other scripting language) that implemented the full TFTP RFC specifications.
Download: