This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

When trying to look at VoIP calls that span across files, I see the call using telephony>VoIP calls in the capture containing the start of the call, and obviously as it contains the call set up, however I can not see the continuation of that call by doing the same thing in subsequent files. I know I have to manually filter to see (and listen) to it, but can not find any information on how to do this. Related,,is there anyway to "splice" two files (i.e. ring buffered) files together to make one continuous? Thanks....

asked 28 Apr '16, 15:59

Templedogs's gravatar image

Templedogs
1111
accept rate: 0%


Use Mergecap, which is distributed and installed with Wireshark.

permanent link

answered 28 Apr '16, 19:50

Rooster_50's gravatar image

Rooster_50
23891218
accept rate: 15%

Or drop multiple capture files onto the Wireshark window (does this even work with the Qt version?)

(29 Apr '16, 00:38) Jaap ♦

This doesn't quite work on the Qt version.....it does however still work on the Legacy version.

(29 Apr '16, 06:23) Rooster_50

Indeed, there's still an open bug on Qt for that.

(29 Apr '16, 07:02) Jaap ♦

Thanks...did not even realize there was a merge under files...Lots to learn...thank you so much for your reply. Will play with it today....

(29 Apr '16, 07:35) Templedogs

The method Jaap and I are talking about, is to open the Legacy version of Wireshark, then select all the files you wish to merge, and then simply drag-and-drop them into the open Wireshark window. The files will be merged in chronological order. You can then save this as a merged file using the FILE | SAVE AS.

Please don't forget to Accept this answer if it answered your question.

(29 Apr '16, 08:51) Rooster_50

File->Merge works even in Qt :-) But after each merge, you have to save the merged captures as a new file before merging in another file.

(29 Apr '16, 10:27) sindy
showing 5 of 6 show 1 more comments
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×19

question asked: 28 Apr '16, 15:59

question was seen: 676 times

last updated: 29 Apr '16, 10:27

p​o​w​e​r​e​d by O​S​Q​A