Revision history  [back]

Hi, I have a pcap/pcapng that I like to replace the gsm_sms.sms_text data with '*' using tshark. keep the pcap length but hide the content.

I understand dissector code change is required but I have no idea where.

It should support fragmented messages.