Skip to content
forked from theclam/stripe

Works on windows without admin privileges

Notifications You must be signed in to change notification settings

aabluedragon/stripe

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

This fork allows running on windows as well without admin privileges.

stripe v0.4
Written by Foeh Mannay, April 2021

PURPOSE
=======

"stripe" is a tool which attempts to remove any and all encapsulating headers (i.e.
VLAN tags, MPLS shim headers, PPPoE, GRE, L2TP, GTP, VXLAN and ERSPAN) from a pcap file,
leaving plain old payload over Ethernet. This is useful as some tools cannot work with
encapsulated frames and, until now, I couldn't find any automatic way to convert a pcap
with such headers into a usable format.

The nested IP fragment re-assembly support *seems* to be stable now and is at the point
where I can no longer find any pcap files that trip it up. Please feel free to contribute
any that you find!

This version of stripe adds ERSPAN support for Types I, II & III, though only Type II is
actually tested at the moment.

VXLAN is supported on the two standard UDP ports (8472 and 4789).

Please see http://networkingbodges.blogspot.com/ for more information on the
theory behind this if you are interested.

INSTALLATION
============

For Linux / Mac / MinGW it should be possible to build from source using:

gcc -o stripe stripe.c

I will make some binaries available for convenience but I make no assurances that I will
keep them up to date.

USAGE
=====

There are only two parameters and both are mandatory. You must specify your
input capture file (original pcap format) with the -r flag and your output capture file
with the -w flag. Here's an example:

Harrys-MacBook-Air:stripe foeh$ ./stripe -r mpls-frames.cap -w clean-frames.cap

Parsing capfile...

4 frames processed.
Harrys-MacBook-Air:stripe foeh$

CHANGE LOG
==========

v0.1a	First working release, tested with 802.1Q VLANs, MPLS, GRE and PPPoE. L2TP in 
development.

v0.2a	Added "experimental" GTP support, realised the need to pad small frames!

v0.3a	Added IP fragment reassembly support

v0.3b	Added VXLAN support

v0.3c	Fixed L2TPv2 support, which flat out didn't work up until now.

v0.4	Added ERSPAN support

About

Works on windows without admin privileges

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 100.0%