Wireshark · Ethereal-dev: [Ethereal-dev] on-the-fly unzipping of compressed captures?

[Jeff Morriss <jeff.morriss@xxxxxxxxxxx>]

Hi list,

I noticed that with 0.10.12 if I load a compressed (e.g., gzip'd) file 
the file size in the progress window grows as the file is read in.  I 
guess it's being uncompressed on the fly now?  (What would be really 
cool is if that could be done in another thread so that we could take 
advantage of other CPUs ;-))

This has a couple of interesting side effects, though:  first, the "time 
left" grows as the file is loaded (which is, of course, a bit 
disconcerting).  Second (which I don't understand) is that when the 
progress window goes away there is usually quite a bit of "time left" 
(in fact the amount of "file processed" hasn't reached the "file to 
read" number either).

As an example, I have a 13 Mb file that is compressed down to 3 Mb.  The 
"Time left" first appears as around 10 seconds but then grows to 2.5-3 
minutes before the load is done.

BTW, what I'm doing is just "ethereal -r myfile.cap.gz".

Any thoughts?

Regards,
-Jeff