Hi everyone, I'm using tshark to dissect Diameter pcap by this command:
but by doing this, some AVPs aren't dissected. I didn't face this problem with Camel. After that, I changed the command:
My objective is to force the dissector going through all AVP. But in this way, it always spends 100% CPU and slow down the progress (like using filter). So I modified the source code of tshark.c by adding "print_details = TRUE" and remove the option "-T fields -e "diameter.Session-Id" in the command. It works but CPU still high (90%). Running with Camel, it spend only ~ 40% CPU
Can you help me to find the way to force the dissector going through all AVP (by tshark or changing code) without using options like filter so that it can make my program faster?
Thank you for your help.
P/S: I also try -V option, it works but CPU still 100% :-s
asked 27 Oct '17, 22:15
edited 28 Oct '17, 04:37