Wireshark-dev: Re: [Wireshark-dev] Profiled dumpcap
From: Guy Harris <[email protected]>
Date: Thu, 8 May 2014 13:29:00 -0700
On May 8, 2014, at 1:02 PM, Anders Broman <[email protected]> wrote:

> It might be worth it to reduce the number of write_to_file() by putting stuff in a buffer before writing to file.

write_to_file() calls fwrite(), which puts stuff in a buffer before writing to the file in the sense of "calling write() or WriteFile()).  Would adding another layer of buffering atop the standard I/O library buffering make a significant difference here?  (libpcap, as used by, for example, tcpdump, makes multiple fwrite() calls per packet written.)