This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, is it possible to know about, why the dissector was called ? Here is the description of my problem : - The complete decoding of the packet takes to long while capturing so i wish do decode the tcp packet only if the details window will open ( double click on the packet).

asked 30 Aug '12, 13:15

derinicehand's gravatar image

derinicehand
1112
accept rate: 0%

edited 30 Aug '12, 13:23


Ehm, no you cannot. The only thing you can do is look at the tree you get. If it's NULL you can forgo the creation of the proto items, BUT NOT THE REST. You must do column fills, reassembly, call subdissectors, etc.

Have you played with the Display options in the capture dialog? Does unchecking 'Update packet list in real time' help?

permanent link

answered 30 Aug '12, 15:33

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×637
×158

question asked: 30 Aug '12, 13:15

question was seen: 1,634 times

last updated: 30 Aug '12, 15:33

p​o​w​e​r​e​d by O​S​Q​A