PCAP Sanitization Tool

Sebastian Castro sebastian at nzrs.net.nz
Wed Jun 16 23:15:05 UTC 2010


Bein, Matthew wrote:
> Hello, 
> 
>  
> 
> Anyone know of a good tool for sanitizing PCAP files? I would like to
> keep as much of the payload as possible but remove src and dst ip
> information. 
> 

Would address anonymization work? Instead of removing src/dst ip, you
can zero them.

I've used CoralReef for that sort of things
(http://www.caida.org/tools/measurement/coralreef/)

Cheers!
-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535




More information about the NANOG mailing list