Wireshark-bugs: [Wireshark-bugs] [Bug 1184] *Shark should support associating TCP and UDP packet
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 11 Dec 2012 16:15:29 +0000

Comment # 6 on bug 1184 from 
Created attachment 9666 [details]
Filtering by process name on windows, using GetExtendedTcpTable

Implemented as the previous comments suggest. It prefers to provide outdated
data rather than delay the capture process:

- it caches the results from GetExtendedTcpTable, and only calls it again if it
can't find the IP addresses

- same for getting process names from PIDS (it only calls OpenProcess,
GetProcessImageFileName if it hasn't seen the PID before)

This information could also come from winpcap, it would probably be more
accurate and efficient.

You are receiving this mail because:
  • You are the assignee for the bug.
  • You are watching all bug changes.