This is our old Q&A Site. Please post any new questions and answers at

1,How did the rlc reassemble the code from mac in wireshark? you should tell me the main step of reassemble in wireshark.

2,Is the wireshark malloc memory for each rlc SDU? because when the wireshark decode a big *.pcap,it will occupy a big memory.

is the wireshark reassemble the rlc code stream from mac like this step? 1,decode each rlc code and malloc new memory for each rlc SDU.

2,when user click the frame .wireshark will find the rlc SDU's which have the same logical channel id. and then reassemble those ,transport to up level.

3,so for each rlc decode,it need to search the memory which malloced by rlc. if the memory is big, then the time used to decode is long.


asked 19 Feb '13, 02:15

smilezuzu's gravatar image

accept rate: 0%

Assuming its UMTS rlc you can read the code of packet-rlc.c to figure out how it's done and see if any improvments can be done. You should probably start out by trying the development version to see if there has been improvments done allready.

permanent link

answered 19 Feb '13, 08:15

Anders's gravatar image

Anders ♦
accept rate: 17%

how to get the development version?

(20 Feb '13, 23:33) smilezuzu

I have download the development version,and compile it.but the rlc reassemble is not so still bad.

(25 Feb '13, 02:17) smilezuzu

any body help me to fix the rlc reassemble process?

(25 Feb '13, 02:18) smilezuzu
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 19 Feb '13, 02:15

question was seen: 2,427 times

last updated: 25 Feb '13, 02:18

p​o​w​e​r​e​d by O​S​Q​A