Wireshark · Ethereal-users: RE: [Ethereal-users] Ethereal 0.8.14 locks up on "large" captures .

["McNutt, Justin M." <McNuttJ@xxxxxxxxxxxx>]

I did indeed disable name lookups - in fact, it's a habit I have, since it
drastically speeds up decode times.

I will get the CVS source for ethereal and see if that doesn't fix things.
I'm currently using a copy of 0.8.14 that I snagged close after it was
released.

I will also see what tethereal does.  I was using the X Windows interface
via ssh.

--J

> -----Original Message-----
> From: Gilbert Ramirez [mailto:gram@xxxxxxxxxx]
> 
> I got the file, thanks. It had exactly 10,000 frames in it. 
> It worked just fine,
> using the current CVS version of Ethereal. There was a *big* 
> difference of load
> times between enabling and disabling name lookups. But at no time did
> Ethereal/tethereal hang or crash.
> 
> I ran "time tethereal -r mcnutt.cap" and it took 10 minutes 
> for the whole file
> to print out to my screen.
> 
> I then ran "time tethereal -n -r mcnutt.cap", where the "-n" 
> disables name
> lookups, and it took only 6.9 seconds for the whole file to 
> be processed
> and print to my screen.
> 
> If you disable name lookups (either via command-line or via GUI), does
> Ethereal hang?
> 
> --gilbert
>