This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Multicore scaling?

0

Any plans for this? On larger files, would significantly speed up the use of complex display filters.

asked 02 Feb '11, 07:33

rancur3p1c's gravatar image

rancur3p1c
1111
accept rate: 0%


2 Answers:

1

I think it's on a lot of developer's minds, but it is not/will not be easy.

There is a wiki entry that discusses some of what must be done from a development perspective.

answered 02 Feb '11, 07:56

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

1

Complex display filters do not themselves require lots of CPU time. Dissecting packets does, and you need to dissect packets to handle any display filters. See item 6 in this list for some discussion of parallelizing dissection; unfortunately, it's an "embarrassingly serial" problem in the general case, but there's some stuff that could be parallelized.

answered 02 Feb '11, 18:45

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%