Wireshark · Wireshark-dev: [Wireshark-dev] Tools to anonymize pcaps with cellular/3gpp traffic

[Ivan Nardi <nardi.ivan@xxxxxxxxx>]

Hi

There are a few public available tools that anonymize pcap files, but they usually target L2-L4 layers and "standard" protocols (i.e. dns, icmp,...)

Is there any tool which sanitizes information carried on "3gpp" protocols (ranap, bssap, gsm_a dtap, gsm_map, sgsap...) or, at least, on some of them?

I am not looking for something particularly advanced: zeroing mcc and mnc (both in imsi and in cell/location information) should be enough, even without checksum updating.

The goal is to easily share some pcaps without changing them with an hex-editor by hand

I know that I am asking for a very specific tool, but it's worth giving it a try...

Thanks in advance

Ivan