Wireshark · Wireshark-users: Re: [Wireshark-users] Filter VoIP calls using command line

[j.snelders@xxxxxxxxxx]

Hi Ujjval,

Try TShark:
$ tshark -r SIP.cap -R "sip.Call-ID contains "12013223"" -w sip2.cap

Regards
Joan


On Mon, 11 May 2009 15:27:01 -0700 Ujjval Karihaloo wrote:
>Is there a way to filter VoIP  calls in a large PCAP capture, and segregate
>them into a separate smaller file. A command line utility that would help
>with this without having to open up the large file in GUI and apply the
filter
>like "sip contains 408551000".