Wireshark-dev: Re: [Wireshark-dev] Tshark0994 memory question

From: rmkml <rmkml@xxxxxxx>

Date: Sun, 14 Jan 2007 10:06:25 +0100 (CET)

thx again for reply Guy,

You can, of course, just run with "-o tcp.desegment_tcp_streams:false"to disable TCP reassembly entirely....


tshark -ta -ni eth0 -o tcp.desegment_tcp_streams:false
and tshark use more than 500Mo!
if I reenable tcp.desegment_tcp_streams and tshark use only 220Mo,
why ?
Regards
Rmkml

Follow-Ups:
- Re: [Wireshark-dev] Tshark0994 memory question
  - From: Guy Harris

References:
- [Wireshark-dev] Tshark0994 memory question
  - From: rmkml
- Re: [Wireshark-dev] Tshark0994 memory question
  - From: Guy Harris
- Re: [Wireshark-dev] Tshark0994 memory question
  - From: rmkml
- Re: [Wireshark-dev] Tshark0994 memory question
  - From: Guy Harris

Prev by Date: Re: [Wireshark-dev] [Wireshark-bugs] [Bug 1301] New: File Open dialog preview needs > 3s for large invalid files and appears dead
Next by Date: [Wireshark-dev] Define dissector port
Previous by thread: Re: [Wireshark-dev] Tshark0994 memory question
Next by thread: Re: [Wireshark-dev] Tshark0994 memory question
Index(es):
- Date
- Thread