Wireshark mailing list archives

Re: sec-macof.pcap take ages to load on WireShark 1.4.9 on MacOS Lion


From: Marco Zuppone <msz () msz it>
Date: Tue, 25 Oct 2011 22:29:42 +0100

Hello,

thanks! I found out that excluding the Transport Name Resolution the file loads in half second. Before was taking 5 
minutes.
The strange fact is that Wireshark 1.4.9 under XP loads the file in seconds regardless the Transport Name Resolution 
option.
Thanks.
 Marco - StockTrader
On 25 Oct 2011, at 22:07, Guy Harris wrote:


On Oct 25, 2011, at 1:58 PM, Marco Zuppone wrote:

One example is this sec-macof.pcap that you can find in the supplements material of the  Wireshark Certification 
book.
It is only 970K long but under MacOS version takes at least 5 minutes to load.
Under the same version of Wireshark under Windows XP 32 bit takes seconds…

What happens if you turn off network name resolution, on both platforms, and try to load the file in question?  It 
might be stalling trying to resolve an IP address to a host name on the Mac.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: