I apologize for disappearing for a while but I'm involved in a fairly large project that has me working ridiculously long hours.
I've written about packet editing tools and how every analyst should have one. To this day I still get asked why bother with these tools, so lets cover it.
If you have a trace file that you want to share with a vendor to post online, you might want to change any public ip addresses or data.
A while back I showed you how to edit a packet using Wireshark's Packet Editor and Jasper's cool app Tracewrangler.
Then one day Jasper mentions Wireedit and had no idea what he was talking about, so here you go folks. In this video I show you how to use Wireedit to edit a packet or make a bulk change.