Preparing PDML file

In order to prepare a PDML file, we need a pcap file that contains the necessary network packets belonging to the protocol we want to filter.

Let’s say we want to trace SIP protocol packets. We can directly export the pcap file into the PDML file via Wireshark. However, the PDML file might be huge in size if we export it directly. So it is better to filter it by protocol first to have a smaller size PDML file. To create a PDML file that contains all the SIP protocol packets, first, we should filter the pcap file with the “sip“ keyword, then export the filtered pcap file and open it and finally export that final pcap file as a PDML file and save it.

Below are the step-by-step screenshots.