Wireshark-users: Re: [Wireshark-users] 700 Meg File Wireshark 1.0.7 - Wireshark hangs
From: Jakub Zawadzki <darkjames@xxxxxxxxxxxxxxxx>
Date: Wed, 22 Apr 2009 20:25:40 +0200
On Wed, Apr 22, 2009 at 10:51:08AM -0700, Ujjval Karihaloo wrote:
> I have a 700 Meg file with SIP and RTP whichI am trying to open and it chews up memory upto 3 Gig on my XP laptop.
> This was not happening with the prior Wireshark Version I had.
>  Are there any known issues with latest Wireshark Release w.r.t opening large files.

r27396 [1] is eating a lot of memory :)
if you don't use 'copy as filter' on packet list you can reverse it [2]
(reversing file.c is enough)

[1] - http://anonsvn.wireshark.org/viewvc?view=rev&revision=27396
[2] - http://anonsvn.wireshark.org/viewvc/trunk/file.c?r1=27396&r2=27395&pathrev=27396&view=patch