Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Profiled dumpcap

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 8 May 2014 13:29:00 -0700
On May 8, 2014, at 1:02 PM, Anders Broman <a.broman@xxxxxxxxxxxx> wrote:

> It might be worth it to reduce the number of write_to_file() by putting stuff in a buffer before writing to file.

write_to_file() calls fwrite(), which puts stuff in a buffer before writing to the file in the sense of "calling write() or WriteFile()).  Would adding another layer of buffering atop the standard I/O library buffering make a significant difference here?  (libpcap, as used by, for example, tcpdump, makes multiple fwrite() calls per packet written.)