tcpick is a textmode sniffer that can track tcp streams and saves
the data captured in files or displays them in the terminal. Useful
for picking files in a passive way.

It can store all connections in different files, or it can display
all the stream on the terminal. It is useful to keep track of what
users of a network are doing, and is usable with textmode tools
like grep, sed and awk. It can handle eth and ppp interfaces.