Hi Everyone,
First of all this question should have never been asked here first - I
should have posed this to the user forum first.
Secondly, after some of my own research I discovered that TShark is the tool
that should be used.
Sorry for any inconvenience.
Thanx,
John
On Jan 30, 2008 10:13
Bill Meier wrote:
>
> I guess not (altho the error message is a bit weird):
>
> Only read filters, not capture filters, can be specified when
> reading a capture file.
I'm too quick off the mark today.
-f is the switch to specify a capture filter so the error message is
correct.
The
Bill Meier wrote:
>> What I need to do is to be able to extract out a specific VoIP call using
>> UNISTIM that spans multiple capture files based on IP Address and
>> Source and/or Destination Port and possible a within a specific time frame.
>>
>
> Altho I haven't tried this, I think the followi
>
> What I need to do is to be able to extract out a specific VoIP call using
> UNISTIM that spans multiple capture files based on IP Address and
> Source and/or Destination Port and possible a within a specific time frame.
>
Altho I haven't tried this, I think the following should work:
tshar
Hi,
Would it be possible to add the following functionality to EDITCAP:
Select packets based on:
- Select IP Address and Source Port
- Select IP Address and Destination Port
- As well as Start and End time of packets
Across
- Multiple Input Capture Files
The capture files ar