Re: pcap anonymizer

[Sake Blok <sake.blok () SYN-bit nl>]

On 29 apr 2011, at 09:12, Guy Harris wrote:
> On Apr 28, 2011, at 3:31 PM, Michael Richardson wrote:
>
> > Unless someone says that there is something else out there, I'm going to
> > write an (IPv4) pcap file anonymizer.  I won't make the first version
> > efficient. 
>
> The Internet Traffic Archive has some anonymizing software:
>
>       http://ita.ee.lbl.gov/html/software.html
>
>       http://ita.ee.lbl.gov/html/contrib/tcpdpriv.html
>
>       http://ita.ee.lbl.gov/html/contrib/sanitize.html
>
> and some other stuff that turned up from a search for
>
>       pcap anonymizer
>
> include:
>
>       http://crawdad.cs.dartmouth.edu/meta.php?name=tools/sanitize/generic/AnonTool
>
>       http://www.tm.uka.de/software/pktanon/
>
>       http://scrub-tcpdump.sourceforge.net/-

And you also might want to take a look at  bittwiste (http://bittwist.sourceforge.net/), you'd have to run your capture 
through the program a few times, but efficiency was not required ;-)

Met vriendelijke groet,
Kind Regards,

Sake Blok
Consultant / Trainer / Troubleshooter

SYN-bit - Deep Traffic Analysis - http://www.SYN-bit.nl
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.