<div dir="ltr"><div><div><div>In wireshark, you can choose to follow UDP (or TCP) stream, and then you can export that UDP stream to a new pcap file.<br><br></div>BTW, when capturing stuff on pcap related tool, you can create multiple files based on some rules, such as size of file, or even timestamp like so:<br><code class="bash comments">tcpdump -nq -s 0 -A -vvv -i eth0 -G3600 -w /tmp/trace/sip-%F--%H-%M-%S.pcap</code><br><br></div>The -G is the number of seconds that the file will be rotated.<br><br></div>Ido<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jul 29, 2015 at 11:47 PM, Aqs Younas <span dir="ltr"><<a href="mailto:aqsyounas@gmail.com" target="_blank">aqsyounas@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div><div>Hi,<br><br></div>I know this not a relevant forum for this type of question but hope some of you guys could help me with some pointers.<br><br></div>I have a large pcap(dump) file with calls of multiple clients having different IPs.<br><br></div>I want to extract messages based on different IPs and dump into separate dump file.<br><br></div>How could I achieve this?<br><br></div>Any help would be much appreciated.<br></div><br></div>Thanks.<br></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>