Wireshark · Ethereal-dev: Re: [Ethereal-dev] Improving filter speed

[didier <dgautheron@xxxxxxxx>]

Gilbert Ramirez wrote:
> What kind of speed improvements are you seeing? Timing it with
> tethereal will probably be easier than with ethereal.
>
> --gilbert
if with unpatched ethereal I have saying:
load with no filter (display or color) 70 secondes
with a filter (time is rather constant it's you have a filter or not) 
120 secondes.

with the patch
load with no filter 70s
applying a  color filter between 80 and 110s (now what's in the filter 
matter).

'simple' display filters  ie only protocol name are faster than loading 
without filter.

Didier