| Bug ID |
10544
|
| Summary |
dissection of DCERPC is slow if there is a lot of differed pointers
|
| Product |
Wireshark
|
| Version |
Git
|
| Hardware |
x86
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 13147 [details]
proposed patch
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
packet-dcerpc.c uses a single linked list to track all the pointers that needs
to be dissected.
With some procotols we can have easily 5K or 15K pointers to dissect in a given
packet, profiling with perf indicates that inserting and iterating on the list
is consuming a lot of CPU.
You are receiving this mail because:
- You are watching all bug changes.