In wireshark, you can choose to follow UDP (or TCP) stream, and then you can export that UDP stream to a new pcap file. BTW, when capturing stuff on pcap related tool, you can create multiple files based on some rules, such as size of file, or even timestamp like so: tcpdump -nq -s 0 -A -vvv -i eth0 -G3600 -w /tmp/trace/sip-%F--%H-%M-%S.pcap The -G is the number of seconds that the file will be rotated. Ido On Wed, Jul 29, 2015 at 11:47 PM, Aqs Younas <aqsyounas@gmail.com> wrote:
Hi,
I know this not a relevant forum for this type of question but hope some of you guys could help me with some pointers.
I have a large pcap(dump) file with calls of multiple clients having different IPs.
I want to extract messages based on different IPs and dump into separate dump file.
How could I achieve this?
Any help would be much appreciated.
Thanks.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org