Re: PCAP Sanitization Tool

[Sebastian Castro <sebastian () nzrs net nz>]

Bein, Matthew wrote:
> Hello, 
>
>  
>
> Anyone know of a good tool for sanitizing PCAP files? I would like to
> keep as much of the payload as possible but remove src and dst ip
> information. 

Would address anonymization work? Instead of removing src/dst ip, you
can zero them.

I've used CoralReef for that sort of things
(http://www.caida.org/tools/measurement/coralreef/)

Cheers!
-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535