Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] one possible way to speed up filtering

From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Mon, 23 Mar 2009 20:54:55 +0100
On Mon, Mar 23, 2009 at 06:29:11PM +0100, didier wrote:
> There's still some small stuff which could go but It would only improve
> wireshark speed by 20-40%, I'm not sure it's worth the time.

It most likely is.

> A big change is the per packet protocols bitfield but even if it's in
> rather good shape it triggers a lot of existing bugs in dissectors,
> breaks plugins (I changed hfinfo structure) and so on.

That's not a problem any more: Changing the hinfo structure in the 1.1 tree
is perfectly ok - we created the "stable" trees like 1.0 (and eventually 1.2)
that guarantee a fixed API/ABI during the lifetime of these branches, but
not between them.

  Ciao
        Joerg
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.