Wireshark · Ethereal-dev: RE: [Ethereal-dev] Re: [Ethereal-cvs] cvs commit: ethereal/gtk fi le_dlg.c

[Biot Olivier <Olivier.Biot@xxxxxxxxxxx>]

|From: Ulf Lamping
|
|
|Guy Harris wrote:
|
|>On Sat, Jun 19, 2004 at 05:48:06AM -0500, Ulf Lamping wrote:
|>  
|>
|>Note that for a *really* large file it can take a non-trivial 
|amount of
|>time to compute the preview information, as it has to read the entire
|>capture.
|>  
|>
|I agree.
|
|I think we have the following options on this:
|
|- a progressbar indicating the preview progress, but I don't like this
|- cancelling preview after some amount of packets (e.g. 
|10000), but this 
|will be dependant on the machines speed
|- cancelling preview after some amount of time (e.g. two seconds), I 
|would prefer this approach

I like this idea.

|Cancelling doesn't mean that no info can be shown, as we can 
|still show something like this anyway:
|Filename: hello.cap
|Format: libpcap
|Size: 15242422 bytes
|Packets: > 1523
|First: 2004-04-13 13:31:14
|Elapsed: unknown
|
|Any comments?

How about proposing an estimate of the number of packets based on the first
N packets, if the "preview time limit" has been exceeded?

Other interestng information: DLT information, encapsulation information.

Regards,

Olivier