Wireshark · Wireshark-dev: [Wireshark-dev] Faster filtering?

[Anders Broman <anders.broman@xxxxxxxxxxxx>]

Hi,

I've been toying with the idea of speeding up filtering by saving the "Protocols in frame" string in the frame data structure a

g_string_chunk could be used to reduce the memory fotprint. When entering a filter the matching protocol(s) could be found(?)

Then when the rescanning of packets is done packets not containing the matcing protocols can be skipped.

 

Thoughts?

 

Regards

Anders