FrameAssembly
Edit & Sanitize PCAP · tac_sanitized_radius.fasmFrameAssembly v1.5.1

Edit IP/MAC/VLAN Headers & Sanitize Existing .pcap Files (frameassembly reverse)

You have an existing .pcap capture from tcpdump or Wireshark, and you need to rewrite IP addresses for lab replay, inject an 802.1Q VLAN tag, or scrub internal customer IPs and hostnames before attaching it to a vendor TAC ticket.

What This Capture Builds

Decompiles the binary .pcap into readable .fasm code via frameassembly reverse (or Playground Import .pcap), edits the host IP/MAC blocks and L2–L7 fields, and recompiles with automatic checksum and TCP sequence recalculation.

How to Customize

  1. Run frameassembly reverse incident.pcap -o sanitized.fasm (or click Import .pcap in the Playground).
  2. Edit the host IPs (e.g. RFC 5737 192.0.2.x), MACs, VLAN tags, or RADIUS/TLS strings, then recompile.
tac_sanitized_radius.fasm
host branch_gw { ip 192.0.2.1     mac 0011.22aa.bb01 }
host auth_srv  { ip 198.51.100.10 mac 0011.22cc.dd10 }
flow tac_sanitized_radius(gw, srv) {
    gw -> srv vlan 100 radius access_request id 10 user "redacted_user" nas_ip 192.0.2.1 wait 10ms
    gw <- srv vlan 100 radius access_accept  id 10 wait 5ms
    gw -> srv vlan 100 syslog facility 1 severity 6 hostname "branch-gw" app "tacacs" msg "User authenticated via 802.1X" wait 2ms
}
compile {
    tac_sanitized_radius(branch_gw, auth_srv)
}
Local CLI Compile, Inspect & Replay Commands
# 1. Decompile any existing .pcap or .pcapng into editable .fasm code
frameassembly reverse production_incident.pcap -o tac_sanitized_radius.fasm

# 2. After editing IPs, VLANs, or strings in .fasm, preview and recompile to .pcap
frameassembly show tac_sanitized_radius.fasm
frameassembly tac_sanitized_radius.fasm -o sanitized_ticket.pcap

# 3. Verify updated IPs, VLAN tags, and valid checksums in tshark
tshark -r sanitized_ticket.pcap -V
Step Up From Browser Sandbox to Local Workflow

Automate tac_sanitized_radius.fasm locally with the CLI & VS Code Extension

Commit .fasm files to Git, get syntax highlighting in VS Code, and compile .pcap captures in milliseconds.

Install CLI + VS Code

More Packet & .pcap Use Cases

Browse 81-Protocol Docs
SNMP & Monitoring

Trigger Zabbix, SolarWinds, PRTG, LibreNMS, or snmptrapd alerts without pulling live cables.

View use case
Shadow IT & Monitoring

Validate NDR sensors, passive monitoring collectors, and CASB/SNI policies against unauthorized SaaS/AI tools and rogue LAN devices.

View use case
Firewall & ACLs

Verify that TCP port 443 completes a 3-way handshake + TLS ClientHello while port 22 is rejected with TCP RST.

View use case