On Wed, May 18, 2011 at 02:17:33PM -0400, Ed Beroset wrote:
> Speaking of more limited platforms, I wonder about about a way of
> reducing both startup time and memory usage by having the dissectors
> dynamically loaded (as with the current plug-in mechanism) rather than
> statically linked. The current model of adding all dissectors to the
> main code means that Wireshark will keep getting bigger and bigger. I
> wonder if it might not be time to ponder if that's the best possible
> option.
I thought about this not too long ago, and the problem is that the code
to determine which packets belong to which dissector is in the
dissectors themselves, so you have to load all of them anyway.