| Main Archive Page > Month Archives > wireshark-dev archives |
Re: [Wireshark-dev] Performance plug-in problem
From: wsgd <wsgd_at_nospam>Date: Thu Aug 26 2010 - 20:19:37 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>
Guillaume PETIT a écrit :
> Hello,
>
> I developped a plug-in to decode a specific protocol. This protocol is
> made of 256 "words" of 256 bytes.
> I have to decode those "words" grouping them in regard with the nature
> of thoses 4 bytes word.
> A 7 bits fields present in the the "word" (4 bytes), allow me to
> define the nature of the "word".
>
> To group my word, i defined an array: tab[256][256] in which I classed
> my word.
> My plug-in is decoding properly my protocol on 1 frame.
>
> Nevertheless, when I load a important capture of 50Mbytes, Wireshark
> crash. I don't understand why.
> I imagine my problem is link to the wireshark perforance.
Split your capture file in little part and try each part separately.
If there is no problem, you can imagine a "performance" problem.
You can try tshark to find where it crash.
>
> Could you help me to improve my code ?
> Could you explained my how wireshark is working when it uses a plug-in ?
>
> Regards.
>
> Guillaume
> ------------------------------------------------------------------------
>
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe
-- Wireshark Generic Dissector http://wsgd.free.fr ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe