I have a pcap file which contains tcp traces.
I was wondering if there's a way to split these traces in order to maintain tcp flows, but also filtering the traffic on a src ip basis.
For example, if into my network I have ip addresses which belong to 192.168.0.0/16, I want to divide the traces in two pcaps: the first with ip from 192.168.0.0 to 192.168.127.127 and the second from 192.160.127.128 to 192.168.255.255.
At the same time, I don't want to lose tcp connections towards external servers.
Can Wireshark do this?