[127285] in North American Network Operators' Group
Re: PCAP Sanitization Tool
daemon@ATHENA.MIT.EDU (jul)
Sat Jun 19 11:28:28 2010
Date: Sat, 19 Jun 2010 17:28:04 +0200
From: jul <jul_bsd@yahoo.fr>
To: nanog@nanog.org
In-Reply-To: <EFBFF5360F0AA044AC59D2198E5EE4AA02D5BBEC@EXCHANGEBE.iso-ne.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I would add the following to FLAIM
- ranonymize from Argus
http://www.qosient.com/argus/anonymization.htm
- Anontools
http://www.ics.forth.gr/dcs/Activities/Projects/anontool.html
- CPAN IP::Anonymous
http://search.cpan.org/~jtk/IP-Anonymous-0.04/lib/IP/Anonymous.pm
But I'm not sure if all of them could handle pcap.
Best regards,
Julien
Bein, Matthew wrote on 16/06/10 18:58:
> Hello,
> Anyone know of a good tool for sanitizing PCAP files? I would like to
> keep as much of the payload as possible but remove src and dst ip
> information.
