Wireshark-bugs: [Wireshark-bugs] [Bug 5254] Converted SNOOP capture file slow to read in
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 23 Sep 2010 10:56:27 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5254

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2010-09-23 10:56:24 PDT ---
(In reply to comment #0)

> The first file has a much higher throughput rate (200 Mbps vs. less than 1
> Mbps)and was limited in its packet size captured to 80 bytes.

How then do the 2 files have the same size (approximately) and approximately
the same number of packets?

So what happens if you try to read the snoop file directly?


First thought as to what's happening: the file with the snapshot length will
cause Wireshark to throw an exception for every packet.  Could exceptions be so
expensive?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.