Ethereal-users: Re: [Ethereal-users] Decoding Big snoop packet capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Jesus M. Salvo Jr." <jsalvo@xxxxxxxxxxxxxxxxx>
Date: Mon, 30 Oct 2000 15:48:14 +1100
What about leaving ethereal doing a packet capture and saving the
capture to a file without live update?



Guy Harris wrote:
> 
> On Fri, Oct 27, 2000 at 05:43:20PM +1100, Jesus M. Salvo Jr. wrote:
> > Are there any known issues with ethereal decoding large snoop files? ...
> 
> There is an issue with Ethereal reading large capture files, period,
> regardless of whether they're tcpdump/Windump/Ethereal/Tethereal/...
> (i.e., libpcap), or snoop, or Sniffer, or Microsoft Network Monitor,
> or; the issue is that we're currently using the GtkClist widget to
> display the packet list, and that widget saves the strings for all
> columns in all rows, which takes up rather a lot of memory.
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users