Remove payload from a pcap (useful to fully anonymize a pcap)

pcap-remove-payload.py

#! /usr/bin/env python2
from scapy.all import *
import sys


INFILE = sys.argv[1]
OUTFILE = sys.argv[2]

with PcapWriter(OUTFILE) as dest:
    with PcapReader(INFILE) as infile:
        for pkt in infile:
            if TCP in pkt:
                pkt[TCP].remove_payload()
            elif UDP in pkt:
                pkt[UDP].remove_payload()
            dest.write(pkt)

#!/usr/bin/env python3
from scapy.all import *
from scapy.layers.inet import *
import sys

with PcapWriter(sys.argv[2]) as out:
    with PcapReader(sys.argv[1]) as in:
        for pkt in in:
            if   TCP in pkt: pkt[TCP].remove_payload()
            elif UDP in pkt: pkt[UDP].remove_payload()
            out.write(pkt)