[Freeswitch-users] how to extract messages(SIP) from large pcap file.

[Bruce Ferrell]

The best place to get this assistance would be in the wireshark forums.

The said, the key to this is what is called the berkeley packet filter 
"language.

for finding the traffic in your large pcap file, in wireshark the format 
would look something like this:

ip.addr==<host ip address> and sip

in tcpdump it would look something like this

host <host ip address> and sip



On 7/29/15 1:47 PM, Aqs Younas wrote:
> Hi,
>
> I know this not a relevant forum for this type of question but hope 
> some of you guys could help me with some pointers.
>
> I have a large pcap(dump) file with calls of multiple clients having 
> different IPs.
>
> I want to extract messages based on different IPs and dump into 
> separate dump file.
>
> How could I achieve this?
>
> Any help would be much appreciated.
>
> Thanks.
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150729/6e8c7f1e/attachment.html