Firehose apache module
mod_firehose provides a mechanism to record data being passed between the httpd server and the client at the raw connection level to either a file or a pipe in such a way that the data can be analysed or played back to the server at a future date. It can be thought of as "tcpdump for httpd".
Connections are recorded after the SSL has been stripped, and can be used for forensic debugging.
The firehose tool can be used to demultiplex the recorded stream back into individual files for analysis, or playback using a tool like netcat.