Tools for stripping parts of a pcap file?

[sthaug () nethelp no]

Does anybody know of a good tool for stripping parts of the packets in 
a pcap file? Say I have a pcap file containing GRE encapsulated info,
and I want to strip the outer IP + GRE headers and leave the rest,
writing out the result to another (valid) pcap file - which should of
course be readable by tcpdump and other libpcap-based tools.

Steinar Haug, Nethelp consulting, sthaug () nethelp no
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.