packet capture tools
PCAP Splitter
PCAP Splitter helps turn a busy SIP capture into smaller call-specific files. It runs in the browser, finds SIP Call-IDs, and exports one classic PCAP per detected call so review and handoff are easier.
What It Does
- Reads PCAP or PCAPNG files locally in the browser.
- Finds SIP packets and groups them by Call-ID.
- Exports one classic PCAP file per detected SIP call.
- Keeps each export focused on signaling packets for that call.
When To Use It
Use it when a capture contains multiple SIP calls and you need to isolate the call under review before opening a ladder, sharing a smaller file, or comparing signaling outcomes.
Important Limits
- The splitter does not redact IP addresses, SIP headers, or customer details.
- Use PCAP Redactor before sending a capture outside your team when identifiers should be masked.
- Exports focus on SIP signaling packets; use RTP Health Analyzer for media quality review.
- Very large captures may take longer to parse in the browser.
Best Next Checks
- Open the split file in SIP Call Flow Analyzer to review call flow.
- Run RTP Health Analyzer on the original or related media capture if audio quality is the problem.
- Use PCAP Redactor when a customer-safe copy is needed.
How To Use PCAP Splitter
- Upload a PCAP or PCAPNG that contains SIP signaling.
- Run Split Calls.
- Review the detected Call-ID exports.
- Download the call-specific PCAP you need.
- Open the exported file in SIP Call Flow Analyzer, or redact it first if it will be shared externally.
Troubleshooting Flow
Example Result
14 downloadable SIP signaling PCAP files
Each filename includes a call index
Each export contains packets for one Call-ID
- Open the relevant split file in SIP Call Flow Analyzer.
- Redact before customer handoff if identifiers should be hidden.
- Keep the original capture for RTP/media checks.
FAQ
Does PCAP Splitter remove sensitive information?
No. It isolates SIP calls by Call-ID, but it does not redact IPs, headers, phone numbers, or SIP values. Use PCAP Redactor for masking before customer handoff.
Why split a PCAP by Call-ID?
A busy capture can include many calls. Splitting by Call-ID keeps one SIP dialog in each file, which makes call-flow review faster and reduces noise.
Does it split RTP media too?
The export is intended for SIP signaling packets tied to a Call-ID. Use RTP Health Analyzer for RTP stream comparison and media-quality clues.