Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Profiled dumpcap

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 8 May 2014 22:11:15 -0700
On May 8, 2014, at 2:09 PM, Anders Broman <a.broman@xxxxxxxxxxxx> wrote:

> I'm not sure but from the picture there seems to be a bit of overhead per write so if we reduce
> the fwrites() to 3, hdr-pkdata-footer with hdr and footer being a local buffer[x] it might make some difference.

Presumably you're talking about the writes in pcapng_write_enhanced_packet_block() and putting the padding, options, and trailer into the footer, right?

But how much of the overhead is due to multiple calls to write_to_file() and thus to fwrite()?