wireshark-dev August 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: [Wireshark-dev] Performance plug-in problem

[Wireshark-dev] Performance plug-in problem

From: Guillaume PETIT <guillaume1360_at_nospam>
Date: Thu Aug 26 2010 - 19:58:08 GMT
To: wireshark-dev@wireshark.org


I developped a plug-in to decode a specific protocol. This protocol is made
of 256 "words" of 256 bytes.
I have to decode those "words" grouping them in regard with the nature of
thoses 4 bytes word.
A 7 bits fields present in the the "word" (4 bytes), allow me to define the
nature of the "word".

To group my word, i defined an array: tab[256][256] in which I classed my
My plug-in is decoding properly my protocol on 1 frame.

Nevertheless, when I load a important capture of 50Mbytes, Wireshark crash.
I don't understand why.
I imagine my problem is link to the wireshark perforance.

Could you help me to improve my code ?
Could you explained my how wireshark is working when it uses a plug-in ?



Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev