pktanon

NAME

pktanon - profile-based traffic anonymizer

SYNOPSIS

pktanon [-c profile_file] input_file output_file
pktanon [options] [input_file] [output_file]

DESCRIPTION

Pktanon is a generic framework for network traffic anonymization. It aims at enabling wide-spread use of realistic network traces by providing fine-grained, profile-based anonymization. It can easily be configured by anonymization profiles, which are used to define how the network traffic should be made anonymous. Such profiles ensure an easy adaptation of the information actually being made anonymous to different environments or local legislation.

OPTIONS

Configuration:
-c, --config <config_file>

anonymization profile

Input Parameters:
-s, --snaplen <number>

read first snaplen bytes from each packet (for both captures and files) [default:256]

-i, --interface <interface>

capture packets from this interface

-p, --no-promiscuous-mode

do not set interface in promiscuous mode

-e, --pcap-filter <filter>

filter specification for libpcap

-r, --use-raw-sockets

use linux raw sockets instead of libpcap (-e option is not available)

Output Parameters:
-U, --packet-buffered

output (to file) is flushed every N packets

-n, --network <interface>

send packets to <interface> using libpcap-inject (EXPERIMENTAL)

-o, --socket <Addr:Port>

send packets to Addr:Port using sockets

(if ’--socket’ option is set:)
-6, --use-ipv6

Use IPv6

-u, --use-udp

Use UDP

Miscellaneous:
-l, --use-libpcap

use libpcap for file i/o

-h, --help, --usage

print this message and exit

-q, --quiet

Reduce output

-v, --verbose

Increase output

RUNNING PKTANON

PktAnon needs a configuration file. Sample configuration files can be found in the profiles directory in the distribution. This directory also includes a sample network trace. Two included configuration files are ’profile-identity.xml’ and ’profile.xml’. The first configuration copies all the fields from original packets into anonymized packets except that packets content is cropped. The second configuration anonymizes mac addresses, ip addresses, and ports in the packets.

To anonymize sample trace using sample configuration files run:

pktanon -c /usr/share/doc/pktanon/examples/profiles/profile-identity.xml profiles/sample.pcap out.pcap

or

pktanon -c /usr/share/doc/pktanon/examples/profiles/identity.xml profiles/sample.pcap out.pcap

The output should look like this:

-----------------------------------------------
pktanon --- profile-based traffic anonymization
-----------------------------------------------
initializing PktAnon, configuration = /usr/share/doc/pktanon/examples/profiles/profile-identity.xml
istream: opened file profiles/sample.pcap
ostream: opened output file out.pcap
initialized
complete

statistics for input file ’profiles/sample.pcap’
processed packets: 9
errors in packets: 0
elapsed time: 22us
Mpps: 0.409

The anonymized trace out.pcap will be created in the root directory of the distribution. If the output file already exists it will be trimmed and rewritten without any warning.