Back to TraceRoo tools

packet capture tools

PCAP Splitter

PCAP Splitter helps turn a busy SIP capture into smaller call-specific files. It runs in the browser, finds SIP Call-IDs, and exports one classic PCAP per detected call so review and handoff are easier.

What It Does

  • Reads PCAP or PCAPNG files locally in the browser.
  • Finds SIP packets and groups them by Call-ID.
  • Exports one classic PCAP file per detected SIP call.
  • Keeps each export focused on signaling packets for that call.

When To Use It

Use it when a capture contains multiple SIP calls and you need to isolate the call under review before opening a ladder, sharing a smaller file, or comparing signaling outcomes.

Important Limits

  • The splitter does not redact IP addresses, SIP headers, or customer details.
  • Use PCAP Redactor before sending a capture outside your team when identifiers should be masked.
  • Exports focus on SIP signaling packets; use RTP Health Analyzer for media quality review.
  • Very large captures may take longer to parse in the browser.

Best Next Checks

  • Open the split file in SIP Call Flow Analyzer to review call flow.
  • Run RTP Health Analyzer on the original or related media capture if audio quality is the problem.
  • Use PCAP Redactor when a customer-safe copy is needed.

How To Use PCAP Splitter

  1. Upload a PCAP or PCAPNG that contains SIP signaling.
  2. Run Split Calls.
  3. Review the detected Call-ID exports.
  4. Download the call-specific PCAP you need.
  5. Open the exported file in SIP Call Flow Analyzer, or redact it first if it will be shared externally.

Troubleshooting Flow

1. PCAP 2. Call-IDs 3. Split calls 4. Review

Example Result

Busy SIP capture PCAP with 14 SIP Call-IDs
14 downloadable SIP signaling PCAP files Each filename includes a call index Each export contains packets for one Call-ID
  • Open the relevant split file in SIP Call Flow Analyzer.
  • Redact before customer handoff if identifiers should be hidden.
  • Keep the original capture for RTP/media checks.

FAQ

Does PCAP Splitter remove sensitive information?

No. It isolates SIP calls by Call-ID, but it does not redact IPs, headers, phone numbers, or SIP values. Use PCAP Redactor for masking before customer handoff.

Why split a PCAP by Call-ID?

A busy capture can include many calls. Splitting by Call-ID keeps one SIP dialog in each file, which makes call-flow review faster and reduces noise.

Does it split RTP media too?

The export is intended for SIP signaling packets tied to a Call-ID. Use RTP Health Analyzer for RTP stream comparison and media-quality clues.