Voir les outils :

• hping3
• tcpreplay tcprewrite
• scapy
• https://www.wireshark.org/docs/man-pages/
• https://gitlab.com/wireshark/wireshark/-/wikis/Tools#capture-file-editors-andor-anonymizers

To exclude packets 1, 5, 10 to 20 and 30 to 40 from the new file use:

editcap capture.pcapng exclude.pcapng 1 5 10-20 30-40

To select just packets 1, 5, 10 to 20 and 30 to 40 for the new file use:

editcap -r capture.pcapng select.pcapng 1 5 10-20 30-40

Source : https://www.wireshark.org/docs/man-pages/editcap.html

Les modifications d'adresses de tcprewrite se font par plage. Pour changer l'adresse de destination

tcprewrite  --dstipmap=10.170.24.203/0:10.0.1.113/0 -C -i filter.cap -o filter-2.cap

le -C est là pour recalculer les checksums UDP ou TCP