On Sun, Apr 06, 2008 at 12:40:08PM -0600, Stephen Fisher wrote:
> On Sun, Apr 06, 2008 at 02:22:12PM +0200, Luis EG Ontanon wrote:
>
> > could you be so kind as to measure the time it takes to:
> >
> > $ time tshark -r empty_file.cap
> > $ time tshark -r empty_file.cap xml.comment
> >
> > I'll ask you again after I commit xml changes
>
> How empty do you want the capture file? Tshark doesn't seem to like a 0
> byte file.
An empty tracefile will typically be 24 bytes, containing a file header.
I just created one with :
"tshark -r trees.cap -R frame.number==100000 -w empty.cap"
Luis, here are some result from my cygwin environment:
sablo@BLOK ~
$ tshark -r trees.cap -R frame.number==100000 -w empty.cap
sablo@BLOK ~
$ ls -l empty.cap
-rwxrwxrwx 1 sablo mkgroup-l-d 24 Apr 6 21:16 empty.cap
sablo@BLOK ~
$ time tshark -r empty.cap
real 0m1.015s
user 0m0.015s
sys 0m0.109s
sablo@BLOK ~
$ time tshark -r empty.cap xml.comment
real 0m0.922s
user 0m0.015s
sys 0m0.077s
sablo@BLOK ~
$ time tshark -r empty.cap
real 0m0.906s
user 0m0.031s
sys 0m0.046s
sablo@BLOK ~
$ time tshark -r empty.cap xml.comment
real 0m0.922s
user 0m0.015s
sys 0m0.093s
sablo@BLOK ~
$ time tshark -r empty.cap
real 0m0.906s
user 0m0.031s
sys 0m0.046s
sablo@BLOK ~
$ time tshark -r empty.cap xml.comment
real 0m0.922s
user 0m0.015s
sys 0m0.031s
sablo@BLOK ~
$ time tshark -r empty.cap
real 0m0.922s
user 0m0.015s
sys 0m0.078s
sablo@BLOK ~
$ time tshark -r empty.cap xml.comment
real 0m0.891s
user 0m0.046s
sys 0m0.031s
sablo@BLOK ~
$
Cheers,
Sake
