Re: [Wireshark-dev] multiple parsing of the same packets

2013-10-31 Thread Evan Huus
On Thu, Oct 31, 2013 at 5:56 PM, Matthieu Patou wrote: > On 10/30/2013 12:07 PM, Evan Huus wrote: >> >> On Wed, Oct 30, 2013 at 2:20 PM, Matthieu Patou wrote: >>> >>> On 10/30/2013 07:31 AM, Evan Huus wrote: On Wed, Oct 30, 2013 at 4:14 AM, Matthieu Patou wrote: > > Hello,

Re: [Wireshark-dev] speed optimizations

2013-10-31 Thread Anders Broman
Didier skrev 2013-10-31 20:34: Hi, On Thu, 31 Oct 2013 11:57:35 +, Anders Broman wrote Are wireshark's developers interested in reviewing and committing these patches? reviewing ,yes certainly . Committing, depends I suspect :-) -1 Base on Yami's work "snapshot feature: apply filter upon

[Wireshark-dev] exclusive applications - are the # of cpu cores be considered ?

2013-10-31 Thread Toralf Förster
I configured BOINC to respect if "make" is running at my Gentoo Linux. But when I do specify just "-j2" for a make process, then 2 BOINC tasks could/should run too in parallel at my 4 core cpu, or ? -- MfG/Sincerely Toralf Förster pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9D

Re: [Wireshark-dev] speed optimizations

2013-10-31 Thread Didier
Hi, On Thu, 31 Oct 2013 11:57:35 +, Anders Broman wrote > > Are wireshark's developers interested in reviewing and committing these patches? > > reviewing ,yes certainly . Committing, depends I suspect :-) > > >-1 Base on Yami's work "snapshot feature: apply filter upon previous displayed pac

Re: [Wireshark-dev] r52963 introduced a build error

2013-10-31 Thread Toralf Förster
On 10/30/2013 03:51 PM, Jeff Morriss wrote: > Yes. Toralf's email was significantly delayed (presumably because he's > not subscribed to the list) waiting for the donuts to be made[1]. > Yeah - isn't there a way to be subscribed but not get all "other" mail ? I'm asking because I do follow the

[Wireshark-dev] How can I reassemble fragments from two different datagrams in the same frame?

2013-10-31 Thread Pitzschel, Daniela
Hi, a problem has occurred with decoding reassembled fragments lately. I've searched the FAQ and mailing lists but found nothing about it. When the last fragment of a datagram would be reassembled in frame x but another fragment of a next datagram would start in the same frame x, the entry of

Re: [Wireshark-dev] multiple parsing of the same packets

2013-10-31 Thread Matthieu Patou
On 10/30/2013 07:25 AM, Anders Broman wrote: -Original Message- From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Matthieu Patou Sent: den 30 oktober 2013 09:15 To: Developer support list for Wireshark Subject: [Wireshark-dev] multiple

Re: [Wireshark-dev] multiple parsing of the same packets

2013-10-31 Thread Matthieu Patou
On 10/30/2013 07:31 AM, Evan Huus wrote: On Wed, Oct 30, 2013 at 4:14 AM, Matthieu Patou wrote: Hello, I noticed long time ago that wireshark is parsing the same packet at least 3 tree times. To make it worse if I go back and forth to the same packet it will be dissected one more time. With c

Re: [Wireshark-dev] speed optimizations

2013-10-31 Thread Anders Broman
> Are wireshark's developers interested in reviewing and committing these > patches? reviewing ,yes certainly . Committing, depends I suspect :-) >-1 Base on Yami's work "snapshot feature: apply filter upon previous displayed >packets only" (without the SAT, only using a true table). help a lot

[Wireshark-dev] speed optimizations

2013-10-31 Thread - Aucun -
Hi, Years ago for our internal use I made a lot of speed related changes to wireshark (then ethereal). Some of these changes are currently in wireshark but many aren't. Lately I'm looking at qt work and I'd like to move our internal tool to it. A simple merge is DOA, vs our wireshark version the