This is our old Q&A Site. Please post any new questions and answers at

When I open a .pcap on wireshark1.8.5. Is take very long time. about 15 minute, size of the .pcap is 90 MB.

why it took so long time?

In the *.pcap, there are many rlc rrc the rlc reassembly step take too much time ?


asked 17 Feb '13, 19:52

smilezuzu's gravatar image

accept rate: 0%

Possibly, if you could raise a bug report including the trace file that might help to find out if anything can be done to speed it up or you could run a profiler tool.

(17 Feb '13, 22:22) Anders ♦

the *.pcap file is too big to upload. and there is no bug report, just took too much time to decode.

(17 Feb '13, 23:40) smilezuzu

Still, if you open a bug at I think you can add the file therwe.

(18 Feb '13, 00:22) Anders ♦

could you help me? Another question: 1,How did the rlc reassemble the code from mac in wireshark? you should tell me the main step of reassemble in wireshark.

2,Is the wireshark malloc memory for each rlc SDU? because when the wireshark decode a big *.pcap,it will occupy a big memory.


(18 Feb '13, 00:31) smilezuzu

added, if the wireshark reassemble the code from mac like this step: 1,decode each rlc code and malloc new memory for each rlc SDU. 2,when user click the frame .wireshark will find the rlc SDU's which have the same logical channel id. and then reassemble those ,transport to up level. 3,so for each rlc decode,it need to search the memory which malloced by rlc. if the memory is big, then the time used to decode is long.

(18 Feb '13, 00:46) smilezuzu
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 17 Feb '13, 19:52

question was seen: 1,767 times

last updated: 18 Feb '13, 00:46

p​o​w​e​r​e​d by O​S​Q​A