Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-30 Thread Small, James
Hi Andy, Lots of interesting suggestions - one that I have used which works decently is the bittwist family (works on most platforms including Windows with pre-built binaries available). Just make sure you heed Guy's warning - there are many other embedded fields and it's hard to get them all in

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-28 Thread Frank Bulk
t: Friday, July 27, 2007 1:29 PM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Whitewashing Packet Traces? Hey all: I'm doing some troubleshooting in a client environ, and we're using Wireshark to analyze CIFS traffic. Problem is, they're a secure site, and require a

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-28 Thread Dan Buckwalter
J. Andrew Kitkowski wrote: > Hey all: > > I'm doing some troubleshooting in a client environ, > and we're using Wireshark to analyze CIFS traffic. > > Problem is, they're a secure site, and require a > whitewash/screening process on all data before they > can send to us. > > In this case, the trace

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-27 Thread DAIGLE, ANDREW PAUL
PROTECTED] On Behalf Of J. Andrew Kitkowski Sent: Friday, July 27, 2007 1:29 PM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Whitewashing Packet Traces? Hey all: I'm doing some troubleshooting in a client environ, and we're using Wireshark to analyze CIFS traffic. P

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-27 Thread Guy Harris
J. Andrew Kitkowski wrote: > In this case, the trace was taken between a W2K3 > server and a Netapp filer (just between two > interfaces/IPs), and we're looking for a way we can > basically whitewash the trace. That is, basically > replace the IPs within the trace with other IPs > (change "10.100

[Wireshark-users] Whitewashing Packet Traces?

2007-07-27 Thread J. Andrew Kitkowski
Hey all: I'm doing some troubleshooting in a client environ, and we're using Wireshark to analyze CIFS traffic. Problem is, they're a secure site, and require a whitewash/screening process on all data before they can send to us. In this case, the trace was taken between a W2K3 server and a Netap