Wireshark-users: Re: [Wireshark-users] mix pcap files

From: "Martin Mathieson" <martin.r.mathieson@xxxxxxxxxxxxxx>
Date: Tue, 26 Feb 2008 14:04:57 +0000
You could try using:
- editcap to shift the base time of one of the captures so that they are in sync(if necessary), THEN
- merge the 2 files together.  You can do this either using:
      - mergecap, OR
      - the merge function under the Wireshark File menu

On Tue, Feb 26, 2008 at 1:02 PM, Cristina Martínez Jimenez <mjchristinaj@xxxxxxxxxxx> wrote:
I want to analyse VoIP calls calling between mobile phones. I have an application in the mobile phone which captures the packets received in the call (pcap file). The problem is that for analizing the call I need only 1 pcap file with all the packets in the call, but what I have is 2 differents pcap files (one from each mobile phone). My question is if it is possible to mix the 2 captures in only one file. Then I would have all the traffic within the call in the same capture and I will be able to analyse it as a complete VoIP call.

Please, help me!!!

Thanks


Tecnología, moda, motor, viajes,.suscríbete a nuestros boletines para estar siempre a la última MSN Newsletters

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users