The best place to get this assistance would be in the wireshark forums.

The said, the key to this is what is called the berkeley packet filter "language.

for finding the traffic in your large pcap file, in wireshark the format would look something like this:

ip.addr==<host ip address> and sip

in tcpdump it would look something like this

host <host ip address> and sip



On 7/29/15 1:47 PM, Aqs Younas wrote:
Hi,

I know this not a relevant forum for this type of question but hope some of you guys could help me with some pointers.

I have a large pcap(dump) file with calls of multiple clients having different IPs.

I want to extract messages based on different IPs and dump into separate dump file.

How could I achieve this?

Any help would be much appreciated.

Thanks.


_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org