Ethereal-dev: Re: [Ethereal-dev] packet drop

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Graeme Hewson <ghewson@xxxxxxxxxxxxxxxxxxx>
Date: Fri, 15 Apr 2005 19:38:41 +0100
LEGO wrote:

tcpdump does not keep state so you can capture tons of stuff and the
process is not going to eat all the memory available.

On the other hand tethereal keeps stae for several protocols so its
memory usage will keep growing until it crashes.

Mmm, I was thinking about captures of a few minutes or so. Still, there's that extra path length.