Wireshark-bugs: [Wireshark-bugs] [Bug 10544] New: dissection of DCERPC is slow if there is a lot
Date: Wed, 08 Oct 2014 06:48:31 +0000
Bug ID 10544
Summary dissection of DCERPC is slow if there is a lot of differed pointers
Product Wireshark
Version Git
Hardware x86
OS All
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter mat@matws.net

Created attachment 13147 [details]
proposed patch

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
packet-dcerpc.c uses a single linked list to track all the pointers that needs
to be dissected.
With some procotols we can have easily 5K or 15K pointers to dissect in a given
packet, profiling with perf indicates that inserting and iterating on the list
is consuming a lot of CPU.


You are receiving this mail because:
  • You are watching all bug changes.