No,
ethereal will not be faster if you disable or remove dissectors.
in my experience, the most important thing for performance is to make sure
you have enough memory in the machine where you run ethereal.
With a reasonable CPU and a lot of memory 1/5GB-1GB RAM I find ethereal
reasonably fast to handle capture files of several hundred MB in size.
I do not capture traffic with ethereal.
To capture traffic i only use either tcpdump or tethereal to write to a
file.
Then i do post-analysis of the captures with ethereal.
----- Original Message -----
From: "Lars Ruoff"
Sent: Wednesday, June 04, 2003 5:29 PM
Subject: [Ethereal-dev] Removing packet dissectors for speedup
> Hi
>
> Will Ethereal become faster at packet dissection when i remove packet
> dissectors from the build?
> I thought so, because every time a packet is dissected, the hook and
filters
> have to be checked against all dissectors?
> Is the time proportional to the number of installed dissectors?
> As speed is much of a concern in my current project, i would like to have
> some feedback on that if possible.
> I already tried to remove dissectors, but this gets to a mess quickly,
with
> all the dependencies among dissectors.
> Has anyone thought of an "Ethereal Light" which only has the most
important
> dissectors installed?
> (of course, "important" is a matter of personal judgement)
>
> best regards,
> Lars Ruoff
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
