Ethereal-dev: Re: [Ethereal-dev] Where is the memory consumed ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Thu, 9 Sep 2004 13:19:36 -0700 (PDT)
Pierre JUHEN said:
>     Where is the memory useb by the packets ?
>        on the capture side ?
>        on the wtap_dump side ?

None of the above.  Neither the capture side (i.e., the part that reads
packets from the capture device) nor the wtap_dump side should allocate
anything on a per-packet basis.

If, however, you're doing packet dissection, because you're using a read
filter, that *can* allocate per-packet data...

>     Behing which varaible / pointer ?

...but not behind any single variable.  Each dissector can allocate memory
of its own.