Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5254] Converted SNOOP capture file slow to read in

Date: Thu, 23 Sep 2010 10:56:27 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5254

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2010-09-23 10:56:24 PDT ---
(In reply to comment #0)

> The first file has a much higher throughput rate (200 Mbps vs. less than 1
> Mbps)and was limited in its packet size captured to 80 bytes.

How then do the 2 files have the same size (approximately) and approximately
the same number of packets?

So what happens if you try to read the snoop file directly?


First thought as to what's happening: the file with the snapshot length will
cause Wireshark to throw an exception for every packet.  Could exceptions be so
expensive?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.