Wireshark-dev: [Wireshark-dev] Faster filtering?
From: Anders Broman <[email protected]>
Date: Wed, 7 Jul 2010 10:31:41 +0200
Hi,
I've been toying with the idea of speeding up filtering by saving the "Protocols in frame" string in the frame data structure a
g_string_chunk could be used to reduce the memory fotprint. When entering a filter the matching protocol(s) could be found(?)
Then when the rescanning of packets is done packets not containing the matcing protocols can be skipped.
 
Thoughts?
 
Regards
Anders