Wireshark-users: Re: [Wireshark-users] sec-macof.pcap take ages to load on WireShark 1.4.9 on Mac
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 25 Oct 2011 14:07:53 -0700
On Oct 25, 2011, at 1:58 PM, Marco Zuppone wrote:

> One example is this sec-macof.pcap that you can find in the supplements material of the  Wireshark Certification book.
> It is only 970K long but under MacOS version takes at least 5 minutes to load.
> Under the same version of Wireshark under Windows XP 32 bit takes seconds…

What happens if you turn off network name resolution, on both platforms, and try to load the file in question?  It might be stalling trying to resolve an IP address to a host name on the Mac.