This is a static archive of our old Q&A Site. Please post any new questions and answers at

dissector onDoubleClick


Hi, is it possible to know about, why the dissector was called ? Here is the description of my problem : - The complete decoding of the packet takes to long while capturing so i wish do decode the tcp packet only if the details window will open ( double click on the packet).

asked 30 Aug '12, 13:15

derinicehand's gravatar image

accept rate: 0%

edited 30 Aug '12, 13:23

One Answer:


Ehm, no you cannot. The only thing you can do is look at the tree you get. If it's NULL you can forgo the creation of the proto items, BUT NOT THE REST. You must do column fills, reassembly, call subdissectors, etc.

Have you played with the Display options in the capture dialog? Does unchecking 'Update packet list in real time' help?

answered 30 Aug '12, 15:33

Jaap's gravatar image

Jaap ♦
accept rate: 14%