Re: Performance plug-in problem

[wsgd <wsgd () free fr>]

Guillaume PETIT a écrit :
> Hello,
>
> I developped a plug-in to decode a specific protocol. This protocol is 
> made of 256 "words" of 256 bytes.
> I have to decode those "words" grouping them in regard with the nature 
> of thoses 4 bytes word.
> A 7 bits fields present in the the "word" (4 bytes), allow me to 
> define the nature of the "word".
>
> To group my word, i defined an array: tab[256][256] in which I classed 
> my word.
> My plug-in is decoding properly my protocol on 1 frame.
>
> Nevertheless, when I load a important capture of 50Mbytes, Wireshark 
> crash. I don't understand why.
> I imagine my problem is link to the wireshark perforance.
Split your capture file in little part and try each part separately.
If there is no problem, you can imagine a "performance" problem.

You can try tshark to find where it crash.

> Could you help me to improve my code ?
> Could you explained my how wireshark is working when it uses a plug-in ?
>
> Regards.
>
> Guillaume
> ------------------------------------------------------------------------
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


-- 
Wireshark Generic Dissector http://wsgd.free.fr

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe