Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] sec-macof.pcap take ages to load on WireShark 1.4.9 on Mac

From: Marco Zuppone <msz@xxxxxx>
Date: Tue, 25 Oct 2011 22:29:42 +0100
Hello,

thanks! I found out that excluding the Transport Name Resolution the file loads in half second. Before was taking 5 minutes.
The strange fact is that Wireshark 1.4.9 under XP loads the file in seconds regardless the Transport Name Resolution option.
Thanks.
 Marco - StockTrader
On 25 Oct 2011, at 22:07, Guy Harris wrote:

> 
> On Oct 25, 2011, at 1:58 PM, Marco Zuppone wrote:
> 
>> One example is this sec-macof.pcap that you can find in the supplements material of the  Wireshark Certification book.
>> It is only 970K long but under MacOS version takes at least 5 minutes to load.
>> Under the same version of Wireshark under Windows XP 32 bit takes seconds…
> 
> What happens if you turn off network name resolution, on both platforms, and try to load the file in question?  It might be stalling trying to resolve an IP address to a host name on the Mac.
> 
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe