Wireshark-dev: Re: [Wireshark-dev] Performance plug-in problem

From: wsgd <wsgd@xxxxxxx>
Date: Thu, 26 Aug 2010 22:19:37 +0200
Guillaume PETIT a �crit :
Hello,

I developped a plug-in to decode a specific protocol. This protocol is made of 256 "words" of 256 bytes. I have to decode those "words" grouping them in regard with the nature of thoses 4 bytes word. A 7 bits fields present in the the "word" (4 bytes), allow me to define the nature of the "word".

To group my word, i defined an array: tab[256][256] in which I classed my word.
My plug-in is decoding properly my protocol on 1 frame.

Nevertheless, when I load a important capture of 50Mbytes, Wireshark crash. I don't understand why.
I imagine my problem is link to the wireshark perforance.
Split your capture file in little part and try each part separately.
If there is no problem, you can imagine a "performance" problem.

You can try tshark to find where it crash.


Could you help me to improve my code ?
Could you explained my how wireshark is working when it uses a plug-in ?

Regards.

Guillaume
------------------------------------------------------------------------

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe


--
Wireshark Generic Dissector http://wsgd.free.fr