Ethereal-dev: [Ethereal-dev] Regarding Memory allocation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "harshas" <harshas@xxxxxxxxxxxxxxxxxxx>
Date: Fri, 28 Jan 2005 12:06:00 +0530
Hello,
  I am using ethereal 10.7 and  on LINUX machine.
      Using ethereal I could read a captureed file with 'n' number of packets (header and rawbytes).
  1.  My question is Ethereal dissection routine is called only when a packet is selected randomly through seek_read routine.The raw bytes present in the tvbuff will
 be accessed and decoded. is it right?
  2. If so Every time  a packet is selected randomly ethereal dissector will get the corresponding raw bytes of the packet from tvbuff . Whether the bytes are read from the captured file each time when seek read is called or all the bytes of all the packets are read once during the file read?.
  3. If read once during the file read How the raw bytes of the individual packets are stored? If the number of packets and the corresponding bytes are more will ethereal gives any overflow message?
 
Please answer me these basic doubts regarding ethereal.
 
Thanks in advance
      Harsha