convert argus logs to pcap files

[George Jones]

I was looking for a way to do anonymization of some pcap data.  ranonymize
seemed
to do a pretty good job with argus data, but I wanted to anonymize pcap data
for use
across multiple tools with the same set of anonymized address....yes, this
is somewhat
bass ackwards.   I've since stumbled acdross:

http://scrub-tcpdump.sourceforge.net/docs.php

which works pretty well for tcp and udp....but does not clean up arp and
friends.

---George

On Fri, Oct 8, 2010 at 3:48 PM, Carter Bullard <carter at qosient.com> wrote:

> Hey Guys,
> Why would you want to do this?
> Carter
>
> On Oct 8, 2010, at 3:15 PM, George Jones wrote:
>
> I was wondering that myself.
>
> Best answers seem to be text2pcap from wireshark, and possibly some
> pythonic thing
> such as http://dirtbags.net/py-pcap.html
>
> ---George Jones
>
> On Fri, Oct 8, 2010 at 2:54 PM, Paul Schmehl <pschmehl_lists at tx.rr.com>wrote:
>
>> Is there a way to do this?
>>
>> --
>> Paul Schmehl, Senior Infosec Analyst
>> As if it wasn't already obvious, my opinions
>> are my own and not those of my employer.
>> *******************************************
>> "It is as useless to argue with those who have
>> renounced the use of reason as to administer
>> medication to the dead." Thomas Jefferson
>> "There are some ideas so wrong that only a very
>> intelligent person could believe in them." George Orwell
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20101008/d7d9bc02/attachment.html>