ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Compiling with or without extcap

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Tue, 9 Jan 2018 15:30:36 +0000

Hi,

This is run on a standard Windows7 PC with just the default extcaps.

This is the interfaces with the Preference off

C:\Development\wsbuild64>run\RelWithDebInfo\dumpcap.exe -D

1. \Device\NPF_{33D2B022-D2AC-40A3-BE47-C81B4F2EC346} (Wireless Network Connecti

on)

2. \Device\NPF_{F592C5E2-78A5-4C2C-87B5-4BB8682C9020} (Bluetooth Network Connect

ion)

3. \Device\NPF_{F0030874-E9A6-4B3F-8441-45E492FE6157} (Local Area Connection)

 

And it’s with winpcap.

Regards

Anders

 

 

From: Wireshark-dev [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Roland Knall
Sent: den 9 januari 2018 15:12
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-dev] Compiling with or without extcap

 

I have 5 extcaps, and the difference is about half a second. Would be interesting, what kind of devices you have in your extcap list.

 

But in general, I still think the main time is loading the rest of interfaces, extcap is a very small part, just pushed the whole time over the top.

 

cheers

 

On Tue, Jan 9, 2018 at 2:38 PM, Anders Broman <anders.broman@xxxxxxxxxxxx> wrote:

Hi,
Startup time with extcap:
14:29:56.217     Main Info Wireshark is up and ready to go, elapsed time 5485000 us

Startup time with the new extcap parameter OFF
14:30:40.559     Main Info Wireshark is up and ready to go, elapsed time 3521000 us

Still a lot of time is spent with the local interfaces

14:30:39.304     Main Info fill_in_local_interfaces() starts
:
14:30:40.216     Main Info fill_in_local_interfaces() ends, taking 0.912s
14:30:40.216          Dbg  FIX: fetch recent color settings
14:30:40.216  Capture Dbg  sync_interface_stats_open
14:30:40.216  Capture Dbg  sync_pipe_open_command
14:30:40.497  Capture Dbg  read 6 indicator: S empty value
14:30:40.559     Main Info Wireshark is up and ready to go, elapsed time 3521000

Regards
Anders

-----Original Message-----
From: Wireshark-dev [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: den 8 januari 2018 02:46
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-dev] Compiling with or without extcap

On Jan 7, 2018, at 3:19 PM, Roland Knall <rknall@xxxxxxxxx> wrote:

> We had this discussion a bung of times. I have nothing against having a preference, but I am very much against making not-loading extcap the default. New users should not face a hassle to enable a capture interface, but existing users, who wish to improve the performance in any way, can profit from an option doing exactly that.
>
> So +1 on making this option available

+1

> big -1 on making it default to not-loading

+1 on the -1 :-)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe