This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I have to deal with very large pcap files which include many voip (h323, sip, isup) calls. Of course it takes a lot time to open these large files and find the correct call on a desktop computer. Is there a tool to create individual pcap files for each voip call from a large file ?

Thanks.

asked 12 Sep '11, 03:59

mrmrmrmr's gravatar image

mrmrmrmr
16113
accept rate: 0%

edited 12 Sep '11, 08:06

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850


You can use Wireshark Lua to do this. Try this Lua script.

permanent link

answered 12 Sep '11, 05:50

bstn's gravatar image

bstn
3751415
accept rate: 14%

Thanks. It seems that this example only covers SIP calls. Where can I find more examples ? maybe an H225 , Q931 , ISUP equivalent ?

Lua is something I didn't know. It seems we can make use of it, but I need to learn a lot.

(12 Sep '11, 08:09) mrmrmrmr

any other suggestions ?

(14 Sep '11, 22:42) mrmrmrmr
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×238
×139
×7

question asked: 12 Sep '11, 03:59

question was seen: 5,664 times

last updated: 15 Sep '11, 06:15

p​o​w​e​r​e​d by O​S​Q​A