This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

so basically i have written a tool,and what it does is

1- capture the packets,write this into a file, initialize epan module

2- open the file using pcap_open_offline(...), then call pcap_loop(...)and in handler function for this apply read filter(for any identity present in request message) on it, call dissection utilities.

3- go to print the packet data, extract message_id.

4- now open the file again using pcap_open_offline() then call pcap_loop() and in handler function, apply this message_id as read filter to print both request and response(req and res have same message_id),call dissection utilities.

5- go to print the output.

now i have this network, messages coming at approx rate of 5k per sec., and this application is taking too much time to print for any identity corresponding to read_filter.how to optimize it, as i have seen,wireshark doing same stuff, capturing then applying read_filter to print the desired output.

asked 17 Jun '13, 13:27

Sanny_D's gravatar image

Sanny_D
0182021
accept rate: 50%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×158
×37
×31
×4

question asked: 17 Jun '13, 13:27

question was seen: 2,340 times

last updated: 17 Jun '13, 13:27

p​o​w​e​r​e​d by O​S​Q​A