Hi, I have a pcap/pcapng that I like to replace the gsm_sms.sms_text data with '*' using tshark. keep the pcap length but hide the content.
I understand dissector code change is required but I have no idea where.
It should support fragmented messages.