This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Any plans for this? On larger files, would significantly speed up the use of complex display filters.

asked 02 Feb '11, 07:33

rancur3p1c's gravatar image

rancur3p1c
1111
accept rate: 0%


I think it's on a lot of developer's minds, but it is not/will not be easy.

There is a wiki entry that discusses some of what must be done from a development perspective.

permanent link

answered 02 Feb '11, 07:56

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

Complex display filters do not themselves require lots of CPU time. Dissecting packets does, and you need to dissect packets to handle any display filters. See item 6 in this list for some discussion of parallelizing dissection; unfortunately, it's an "embarrassingly serial" problem in the general case, but there's some stuff that could be parallelized.

permanent link

answered 02 Feb '11, 18:45

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×349
×3

question asked: 02 Feb '11, 07:33

question was seen: 5,988 times

last updated: 02 Feb '11, 18:45

p​o​w​e​r​e​d by O​S​Q​A