In wireshark, you can choose to follow UDP (or TCP) stream, and then you can export that UDP stream to a new pcap file.

BTW, when capturing stuff on pcap related tool, you can create multiple files based on some rules, such as size of file, or even timestamp like so:
tcpdump -nq -s 0 -A -vvv -i eth0 -G3600 -w /tmp/trace/sip-%F--%H-%M-%S.pcap

The -G is the number of seconds that the file will be rotated.

Ido

On Wed, Jul 29, 2015 at 11:47 PM, Aqs Younas <aqsyounas@gmail.com> wrote:
Hi,

I know this not a relevant forum for this type of question but hope some of you guys could help me with some pointers.

I have a large pcap(dump) file with calls of multiple clients having different IPs.

I want to extract messages based on different IPs and dump into separate dump file.

How could I achieve this?

Any help would be much appreciated.

Thanks.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org