About

Simple packet capture search filters for VoIP traffic analysis

Description

pcapSearch utilizes TShark a network protocol analyzer for simple filtering of previously saved capture files. It optionally displays the results in Wireshark or sngrep.

Usage

./pcapSearch.sh file.pcap

Filter by SRC Number
--src=8005551212

Filter by DST Number
--dst=8005551212

Filter by User
--usr=100

Filter by User Agent
--ua=friendly-scanner

Filter by IP Address
--ip=127.0.0.1

Filter by Call ID
--id=M_mavroudisHT9rvTzA1SNGmuQVpg67HFp

Open results in Wireshark
--ws

Open results in sngrep
--sn

Contributors

Contributors are welcome 👍