search

sunwxg / decode_by_libwireshark

MIT License
18 stars 15 forks source link

needs too long time to decode big file #2

Closed qchai closed 7 years ago

qchai commented 7 years ago

Hi, when I run decode_by_libwireshark to decode a pcap file(about 400M), It takes a long time to decode it,all finished more than 20 minutes. When I open the same file user wireshark, it takes a few seconds.I don't know why decode_by_libwireshark takes so long time, do you have any idea?

sunwxg commented 7 years ago

For my understanding, when wireshark open file, it only decode part of file, not all the file. You can try tshark to decode your file, I think it should be almost same time with decode_by_libwireshark.

qchai commented 7 years ago

Use tshark to decode my file also takes so long time. Thank you very much.