Wireshark-users: [Wireshark-users] Anonymising PCAP files with Wireshark?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Grégoire, André <Andre.Gregoire@xxxxxxxxxx>
Date: Wed, 25 Jan 2012 09:45:04 -0500

Hi Everyone,

 

What is the best way to anonymize pcap files? Mainly substitute a real IP address and mac address for a fake one.

 

There seems to be a lot of scripts out there that change one or the other but I am looking if something is generally accepted as best practice or tried tested and true by this community.

 

Thanks for your time, it’s appreciated.

 

Andre

________________________________

Andre Gregoire

Senior Enforcement Officer

Electronic Commerce Enforcement

Canadian Radio-television and Telecommunications Commission (CRTC)

andre.gregoire@xxxxxxxxxx

Telephone 819-953-6972

Government of Canada