Ethereal-users: [Ethereal-users] Follow TCP Stream, display Hex hangs or takes excessive cpu
I posted this a while back but never saw any kind of resolution. I just
tried the latest 10.9 release and it's still a problem.
This problem seems to have been introduced somewhere around ethereal 9.4
----------------------------
* Subject: [Ethereal-users] Follow TCP Stream, display Hex hangs for
large stream
* From: David Moore <davem@xxxxxxxxx>
* Date: Wed, 22 Sep 2004 10:35:58 -0400
I've noticed a problem in at least the last two releases 10.5 & 10.6 of
Ethereal that did not occur in earlier circa 9.1? versions.
Do a "Follow TCP Stream", after the default display in ASCII comes up
I then select any other format, (typically Hex). If the stream is
relatively large, the redisplay in the nex format takes unusually long
to forever.
In my largest case, I have 10 meg stream. "Follow TCP Stream" takes
approximately 90 seconds to produce the ASCII stream. Selecting "Hex"
results in the CPU pegging at 100% and even after 2 hours never produced
a display.
This same data set did not have this problem with versions of ethereal
from about a year ago.
My main machine is runnning RedHat 9.0, 3.0 GHz, with 1 GB of ram.
I'have identical results on a laptop with Fedora Core 2, 1.6 GHz, 1 GB
ram.
----------------------------