Bein, Matthew wrote: > Hello, > > > > Anyone know of a good tool for sanitizing PCAP files? I would like to > keep as much of the payload as possible but remove src and dst ip > information. >
Would address anonymization work? Instead of removing src/dst ip, you can zero them. I've used CoralReef for that sort of things (http://www.caida.org/tools/measurement/coralreef/) Cheers! -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535
