Ask Your Question

Revision history [back]

mask gsm_sms.sms_text content

Hi, I have a pcap/pcapng that I like to replace the gsm_sms.sms_text data with '*' using tshark. keep the pcap length but hide the content.

I understand dissector code change is required but I have no idea where.

It should support fragmented messages.