ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] one possible way to speed up filtering

From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Mon, 23 Mar 2009 20:54:55 +0100
On Mon, Mar 23, 2009 at 06:29:11PM +0100, didier wrote:
> There's still some small stuff which could go but It would only improve
> wireshark speed by 20-40%, I'm not sure it's worth the time.

It most likely is.

> A big change is the per packet protocols bitfield but even if it's in
> rather good shape it triggers a lot of existing bugs in dissectors,
> breaks plugins (I changed hfinfo structure) and so on.

That's not a problem any more: Changing the hinfo structure in the 1.1 tree
is perfectly ok - we created the "stable" trees like 1.0 (and eventually 1.2)
that guarantee a fixed API/ABI during the lifetime of these branches, but
not between them.

  Ciao
        Joerg
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.