ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] New packet list - out of memory?

From: didier <dgautheron@xxxxxxxx>
Date: Wed, 07 Oct 2009 03:21:54 +0200
Le mardi 06 octobre 2009 ᅵ 12:05 +0200, Anders Broman a ᅵcrit :

>  
> 146 MB 661417 pkts (TCP reassembly)
> 
> Version 1.2.2 (SVN Rev 29910)
> PWS	  Commit		
>  42 016	     61 876	
> 704 656	  1 639 256	         
> Loading time ~57s
>  
> Old packet list SVN 30353
> PWS	  Commit		
>  43 060	     63 384	
> 492 456	  1 427 480	         
> Loading time 47.752 - 48.485 (2 Loading time measures)
> 
> Old packet list SVN 30353
> set WIRESHARK_DEBUG_SE_NO_CHUNKS=T
> PWS	  Commit		
>  43 060	     63 384	
> 559 744	    579 968	         
> Loading time 48.797
> 
> Old packet list SVN 30353
> set WIRESHARK_DEBUG_EP_NO_CHUNKS=T
> set WIRESHARK_DEBUG_SE_NO_CHUNKS=T
>  43 208	     53 312
> 559 612	    569 632
> Loading time 55.162
> 
> Old packet list SVN 30353
> #define EMEM_ALLOCS_PER_CHUNK (EMEM_PACKET_CHUNK_SIZE / 64)
> PWS	  Commit		
>  43 288	     64 188	
> 492 104	    567 060	         
> Loading time 47.736 - 48.391 (2 Loading time measures)
> 
>  
> 
> (This file can't be loaded using 512)
> New packet list SVN 30353
> #define EMEM_ALLOCS_PER_CHUNK (EMEM_PACKET_CHUNK_SIZE / 64)
> PWS	  Commit		
>  43 492	     64 512	
> 332 400	    471 264	         
> Loading time 55.895 - 57.018 (4 Loading time measures)
> 
> New packet list SVN 30353
> #define EMEM_ALLOCS_PER_CHUNK (EMEM_PACKET_CHUNK_SIZE / 64)
> set WIRESHARK_DEBUG_SE_NO_CHUNKS=T
> PWS	  Commit		
>  43 660	     64 736	
> 468 496	    493 660	         
> Loading time 53.666
> 
> New packet list SVN 30353
> #define EMEM_ALLOCS_PER_CHUNK (EMEM_PACKET_CHUNK_SIZE / 64)
> set WIRESHARK_DEBUG_EP_NO_CHUNKS=T
> set WIRESHARK_DEBUG_SE_NO_CHUNKS=T
> PWS	  Commit		
>  43 660	     64 736	
> 468 428	    481 516	         
> Loading time 1:01.215 - 1:02.682 (2 Loading time measures) 
> 
>   Compared with 1.2.2 memory usage has improved quite a bit. Loading
> time
>   has improved with the old packet list but not so much with the new
> packet list!?
The new packet list should be as fast as the old packet list with color
disable an all columns but the frame number removed.

On the other hand your load time is really slow can you share your
wireshark profile, your disable protocols and your capture or at least
its protocol hierarchy?  

Didier