Re: PCAP Sanitization Tool

[Steven Bellovin <smb () cs columbia edu>]

On Jun 16, 2010, at 9:58 48AM, Bein, Matthew wrote:

> Hello,
>
>
>
> Anyone know of a good tool for sanitizing PCAP files? I would like to
> keep as much of the payload as possible but remove src and dst ip
> information.
What's your threat model?  In general, proper anonymization of packet trace data is very hard.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb