I find some workaround analyze about out of memory problem at http://blog.packet-foo.com/2013/05/the-notorious-wireshark-out-of-memory-problem/. In "Around #2", the author noted that "Most things Wireshark displays about a frame is stored in there. Additionally there are hash tables of reassembled data conversation".
@kurt @Guy Harris Thanks in advance. asked 17 Mar '14, 01:48 metamatrix edited 17 Mar '14, 01:50 |
One Answer:
Not to supprisingly reassemble.c, conversation.c in epan answered 17 Mar '14, 04:58 Anders ♦ |