More detailed information on anonymizing is given for following topics :
In the context of the General Data Protection Regulation (GDPR) it has become difficult to exchange Wireshark capture files with other parties.
The anonymizing of the Wireshark capture files helps in avoiding when handling personal or sensitive data.
The anonymize functionality is started by pressing the "Anonymize Wireshark PCAP file" button.
Then the Anonymize window appears :
When pressing the "Select Wireshark PCAP file" button then a single file can be selected to be anonymized.
If multiple files are needed the merge functionality can be used to combine into a single file. This file can then be anonymized.
In the "Output box" a selection of the wanted output is made. This is explained in the section Anonymize output .
With the checkboxes a selection can be made what is anonymized. This is explained in the section Anonymize selection.
When the IP addresses are anonymized (Anonymize IP addresses checked) then the following mapping is used :
● Every private IP address (10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16) is converted to a 10.x.x.x IP address
● Every public IP address is converted to a 192.168.x.x IP address
● Inside a SIP URI the domain name is converted to a 172.16.x.x IP address