Wireshark-dev: Re: [Wireshark-dev] Multithreaded filtering
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 14 Oct 2008 12:21:26 -0700

On Oct 13, 2008, at 12:52 PM, Jeff Klingler wrote:

I've seen a few old posts regarding making Wireshark multithreaded and
how difficult it would be to make the protocol disectors
multithreaded.  Why not just make filtering multithreaded for
analyzing the traffic after it has been captured.

Filtering is done by dissecting the packets and checking the values of fields in the packet, so filtering involves dissection.