Ethereal-users: Re: [Ethereal-users] Decoding Big snoop packet capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Thu, 26 Oct 2000 23:52:35 -0700
On Fri, Oct 27, 2000 at 05:43:20PM +1100, Jesus M. Salvo Jr. wrote:
> Are there any known issues with ethereal decoding large snoop files? ...

There is an issue with Ethereal reading large capture files, period,
regardless of whether they're tcpdump/Windump/Ethereal/Tethereal/...
(i.e., libpcap), or snoop, or Sniffer, or Microsoft Network Monitor,
or; the issue is that we're currently using the GtkClist widget to
display the packet list, and that widget saves the strings for all
columns in all rows, which takes up rather a lot of memory.