wireshark-dev August 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] Performance plug-in problem

Re: [Wireshark-dev] Performance plug-in problem

From: Stephen Fisher <steve_at_nospam>
Date: Thu Aug 26 2010 - 20:33:07 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

On Thu, Aug 26, 2010 at 1:54 PM, Guillaume PETIT
<guillaume1360@gmail.com> wrote:

> To group my word, i define a array: tab[256][256] in which a class my word.
> My plug-in is decoding properly my protocol on 1 frame.
> Nevertheless, when I load a capture of 50Mbytes, Wireshark crash. I don't
> understand why.

It's probably running out of memory because of the static 256 x 256
(64k) arrays that the dissector is using. How about using dynamic
memory allocation (using the ep_ functions so the memory is
automatically freed after dissecting the current packet) and not
allocating more memory than is required at a time?
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev