I would add the following to FLAIM
- ranonymize from Argus
http://www.qosient.com/argus/anonymization.htm
- Anontools
http://www.ics.forth.gr/dcs/Activities/Projects/anontool.html
- CPAN IP::Anonymous
http://search.cpan.org/~jtk/IP-Anonymous-0.04/lib/IP/Anonymous.pm
But I'm not sure if all of them could handle pcap.
Best regards,
Julien
Bein, Matthew wrote on 16/06/10 18:58:
> Hello,
> Anyone know of a good tool for sanitizing PCAP files? I would like to
> keep as much of the payload as possible but remove src and dst ip
> information.
