Wireshark-users: Re: [Wireshark-users] Filter VoIP calls using command line

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: j.snelders@xxxxxxxxxx
Date: Tue, 12 May 2009 07:30:47 +0200
Hi Ujjval,

Try TShark:
$ tshark -r SIP.cap -R "sip.Call-ID contains "12013223"" -w sip2.cap

Regards
Joan


On Mon, 11 May 2009 15:27:01 -0700 Ujjval Karihaloo wrote:
>Is there a way to filter VoIP  calls in a large PCAP capture, and segregate
>them into a separate smaller file. A command line utility that would help
>with this without having to open up the large file in GUI and apply the
filter
>like "sip contains 408551000".