Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-30 Thread Small, James
Hi Andy, Lots of interesting suggestions - one that I have used which works decently is the bittwist family (works on most platforms including Windows with pre-built binaries available). Just make sure you heed Guy's warning - there are many other embedded fields and it's hard to get them all in

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-28 Thread Dan Buckwalter
J. Andrew Kitkowski wrote: Hey all: I'm doing some troubleshooting in a client environ, and we're using Wireshark to analyze CIFS traffic. Problem is, they're a secure site, and require a whitewash/screening process on all data before they can send to us. In this case, the trace was

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-27 Thread DAIGLE, ANDREW PAUL
] On Behalf Of J. Andrew Kitkowski Sent: Friday, July 27, 2007 1:29 PM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Whitewashing Packet Traces? Hey all: I'm doing some troubleshooting in a client environ, and we're using Wireshark to analyze CIFS traffic. Problem is, they're a secure

Re: [Wireshark-users] Whitewashing Packet Traces?

2007-07-27 Thread Guy Harris
J. Andrew Kitkowski wrote: In this case, the trace was taken between a W2K3 server and a Netapp filer (just between two interfaces/IPs), and we're looking for a way we can basically whitewash the trace. That is, basically replace the IPs within the trace with other IPs (change 10.100.100.1