Wireshark-bugs: [Wireshark-bugs] [Bug 6755] slow loading/processing of conversations with over 5
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6755
--- Comment #12 from Cristian Constantin <const.crist@xxxxxxxxxxxxxx> 2012-01-27 02:01:58 PST ---
(In reply to comment #9)
> If you have a UDP conversation between two given {host:port} pairs, and it has
> more than *one* data structure in the hash table, that's a bug - it should
> *not* have an entry in the hash table for every packet!
>
> I.e., frames should *NOT* be stored in that linked list - *conversations*
> should be.
>
> (The purpose of the frame number is to handle the case where there's more than
> one conversation between the specified endpoints, e.g. a TCP connection opens
> between the endpoints, some traffic is exchanged, the connection closes,
> another TCP connection opens between them, etc..)
cristian: yes, right. conversations are stored in the linked list; sorry, it
was my mistake saying frames.
it is also interesting the way you describe these conversations:
"a TCP connection opens
between the endpoints, some traffic is exchanged, the connection closes,
another TCP connection opens between them, etc.."
that is short-lived, non-persistent (most likely http) tcp connections.
in case of sip, diameter aso - they are long-lived persistent (tcp)
connections.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
