<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">The best place to get this assistance
would be in the wireshark forums.<br>
<br>
The said, the key to this is what is called the berkeley packet
filter "language.<br>
<br>
for finding the traffic in your large pcap file, in wireshark the
format would look something like this:<br>
<br>
ip.addr==<host ip address> and sip<br>
<br>
in tcpdump it would look something like this<br>
<br>
host <host ip address> and sip<br>
<br>
<br>
<br>
On 7/29/15 1:47 PM, Aqs Younas wrote:<br>
</div>
<blockquote
cite="mid:CAGVOjVV+a9HWMw14SLWvaeXA+qc6X5h1UQatRN=0sWSaFpVktA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>Hi,<br>
<br>
</div>
I know this not a relevant forum for this type of
question but hope some of you guys could help me
with some pointers.<br>
<br>
</div>
I have a large pcap(dump) file with calls of multiple
clients having different IPs.<br>
<br>
</div>
I want to extract messages based on different IPs and
dump into separate dump file.<br>
<br>
</div>
How could I achieve this?<br>
<br>
</div>
Any help would be much appreciated.<br>
</div>
<br>
</div>
Thanks.<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
<a class="moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a>
Official FreeSWITCH Sites
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.cluecon.com">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a></pre>
</blockquote>
<br>
</body>
</html>