Re: [Wireshark-dev] Feature Request for EDITCAP - Selecting by IP Address and Port Number

2008-01-30 Thread J P
Hi Everyone, First of all this question should have never been asked here first - I should have posed this to the user forum first. Secondly, after some of my own research I discovered that TShark is the tool that should be used. Sorry for any inconvenience. Thanx, John On Jan 30, 2008 10:13

Re: [Wireshark-dev] Feature Request for EDITCAP - Selecting by IP Address and Port Number

2008-01-30 Thread Bill Meier
Bill Meier wrote: > > I guess not (altho the error message is a bit weird): > > Only read filters, not capture filters, can be specified when > reading a capture file. I'm too quick off the mark today. -f is the switch to specify a capture filter so the error message is correct. The

Re: [Wireshark-dev] Feature Request for EDITCAP - Selecting by IP Address and Port Number

2008-01-30 Thread Bill Meier
Bill Meier wrote: >> What I need to do is to be able to extract out a specific VoIP call using >> UNISTIM that spans multiple capture files based on IP Address and >> Source and/or Destination Port and possible a within a specific time frame. >> > > Altho I haven't tried this, I think the followi

Re: [Wireshark-dev] Feature Request for EDITCAP - Selecting by IP Address and Port Number

2008-01-30 Thread Bill Meier
> > What I need to do is to be able to extract out a specific VoIP call using > UNISTIM that spans multiple capture files based on IP Address and > Source and/or Destination Port and possible a within a specific time frame. > Altho I haven't tried this, I think the following should work: tshar

[Wireshark-dev] Feature Request for EDITCAP - Selecting by IP Address and Port Number

2008-01-30 Thread J P
Hi, Would it be possible to add the following functionality to EDITCAP: Select packets based on: - Select IP Address and Source Port - Select IP Address and Destination Port - As well as Start and End time of packets Across - Multiple Input Capture Files The capture files ar