[Freeswitch-users] Extract audio from PCAP

shouldbe q931 shouldbeq931 at gmail.com
Mon Mar 4 03:40:09 MSK 2013


On Sun, Mar 3, 2013 at 11:40 PM, Avi Marcus <avi at avimarcus.net> wrote:
> I've have some really large PCAPs sometimes and wireshark just dies trying
> to decode the audio in them.
>
> All the links for audio extraction on voipinfo seem really old.
>
> Is there something else to extract the audio from pcaps? Or some command to
> to pass tshark to just save all audio as a .wav file?
>
> What does voipmonitor use?
> I think I asked this before...
>
> Thanks,
> -Avi Marcus

How big are the pcap files ?

you could use editcap to split them up into more manageable chunks,
and then use wireshark...
http://www.wireshark.org/docs/man-pages/editcap.html

I've not either but, youmight look at

http://frox25.no-ip.org/~mtve/wiki/RtpExtract.html

and

http://www.netresec.com/?page=NetworkMiner

Cheers

Arne



Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list