79421738

Date: 2025-02-07 17:51:17
Score: 1.5
Natty:
Report link

Uh, recently I had the same problem. I guess you don't need it, but if someone needs to remove TZSP from an existing pcap or during online sniffing and removing TZSP, you can check out the Scapy TZSP contrib: https://scapy.readthedocs.io/en/stable/api/scapy.contrib.tzsp.html

Here you can find a reference: https://github.com/nedeadinside/TZSP-Cleaner. If you want to use the Scapy implementation, you should change

from tzsp import TZSP to from scapy.contrib.tzsp import TZSP

Reasons:
  • Whitelisted phrase (-1): I had the same
  • Contains signature (1):
  • No code block (0.5):
  • Low reputation (1):
Posted by: nedeadinside