Hi, is it possible to know about, why the dissector was called ? Here is the description of my problem : - The complete decoding of the packet takes to long while capturing so i wish do decode the tcp packet only if the details window will open ( double click on the packet). asked 30 Aug '12, 13:15  derinicehand edited 30 Aug '12, 13:23 |
One Answer:
Ehm, no you cannot. The only thing you can do is look at the tree you get. If it's NULL you can forgo the creation of the proto items, BUT NOT THE REST. You must do column fills, reassembly, call subdissectors, etc. Have you played with the Display options in the capture dialog? Does unchecking 'Update packet list in real time' help? answered 30 Aug '12, 15:33  Jaap ♦ |
