Skip to content

Instantly share code, notes, and snippets.

@maurorappa
Created October 9, 2024 06:54
Show Gist options
  • Save maurorappa/577be2e042279e8c94beca16dfd094cf to your computer and use it in GitHub Desktop.
Save maurorappa/577be2e042279e8c94beca16dfd094cf to your computer and use it in GitHub Desktop.
PCAP mangling
# tshark -r /root/md.pcap -q -n -z dests,tree
Running as user "root" and group "root". This could be dangerous.
=======================================================================================================================================
IPv4 Statistics/Destinations and Ports:
Topic / Item Count Average Min val Max val Rate (ms) Percent Burst rate Burst start
---------------------------------------------------------------------------------------------------------------------------------------
Destinations and Ports 127892 12.7895 100% 49.6000 0.075
222.10.9.3 127892 12.7895 100.00% 49.6000 0.075
UDP 127892 12.7895 100.00% 49.6000 0.075
11302 127892 12.7895 100.00% 49.6000 0.075
---------------------------------------------------------------------------------------------------------------------------------------
# tcpprep --port --include=P:20000-40000,55000-65000,90000-110000 -o /root/md.cache -i /root/md.pcap
# tcprewrite --portmap=11302:15000 --cachefile=/root/md.cache --infile=/root/mdo.pcap --outfile=/root/md2.pcap
# tshark -r /root/md2.pcap -q -n -z dests,tree
Running as user "root" and group "root". This could be dangerous.
=======================================================================================================================================
IPv4 Statistics/Destinations and Ports:
Topic / Item Count Average Min val Max val Rate (ms) Percent Burst rate Burst start
---------------------------------------------------------------------------------------------------------------------------------------
Destinations and Ports 127892 12.7895 100% 49.6000 0.075
224.0.59.153 127892 12.7895 100.00% 49.6000 0.075
UDP 127892 12.7895 100.00% 49.6000 0.075
11302 77889 7.7891 60.90% 49.6000 0.075
15000 50003 5.0004 39.10% 44.3600 0.995
---------------------------------------------------------------------------------------------------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment