Ethereal-dev: Re: [Ethereal-dev] capture_proto OR dissect_proto

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 16 Dec 2000 23:49:35 -0800
On Sat, Dec 16, 2000 at 10:38:03PM +0200, Paul Ionescu wrote:
> What is the difference between capture_PROTO and dissect_PROTO, and when
> it is supposed to use one or another ?

"capture_PROTO" functions are used when a capture is in progress; they
should do relatively little work, as the machine's CPU(s) may already be
quite busy if the machine is capturing from a high-bit-rate network -
they just update the counters that are displayed by the live-capture
dialog box.  They don't construct a protocol tree or fill in any
columns.

"dissect_PROTO" functions do a full-blown dissection.