Hi, I'm trying to find out the way to make a display filter that includes two different, but related, protocols. I mean, SIP messages contains information about RTP ports. What I am doing now is:
I'd like to develop a filter to do it automatically but I've seen nothing similar. Should I develop a chained-dissector, a post-dissector or should I develop inside display filter? I've taken a look at this: http://wiki.wireshark.org/Lua/Examples#Dump_VoIP_calls_into_separate_files Thanks asked 21 Nov '12, 04:27 Robin |
One Answer:
MATE is your friend here. answered 22 Nov '12, 04:09 Jaap ♦ |
I've just read the description, it seems to fit perfect. Thank you so much!