Wireshark · Wireshark-dev: Re: [Wireshark-dev] Multithreaded filtering

[Guy Harris <guy@xxxxxxxxxxxx>]

On Oct 13, 2008, at 12:52 PM, Jeff Klingler wrote:

> I've seen a few old posts regarding making Wireshark multithreaded and
> how difficult it would be to make the protocol disectors
> multithreaded.  Why not just make filtering multithreaded for
> analyzing the traffic after it has been captured.

Filtering is done by dissecting the packets and checking the values of  
fields in the packet, so filtering involves dissection.