Jakub Zawadzki
changed
bug 9234
| What |
Removed |
Added |
| Attachment #12057 Flags |
|
review_for_checkin-
|
Comment # 12
on bug 9234
from Jakub Zawadzki
Created attachment 12057 [details]
Modify option for tshark (PoC)
Lazy me I put this into tshark.
It can only edit IPv4 addresses, syntax is like (comment #11),
it's not trivial to edit ip.host so you must write seperate rule for ip.src and
ip.dst.
Like:
tshark -r foo.pcap -w foo-changed.pcap \
-M 'ip.src == 10.1.1.1 ==> ip.src="" \
-M 'ip.dst == 10.1.1.1 ==> ip.dst=10.2.2.2'
hope it works for you. If it doesn't work or you want some more features,
feel free to bug me ;-)
You are receiving this mail because:
- You are watching all bug changes.