Wireshark-bugs: [Wireshark-bugs] [Bug 6755] slow loading/processing of conversations with over 5
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6755
--- Comment #13 from Guy Harris <guy@xxxxxxxxxxxx> 2012-01-27 02:12:46 PST ---
> cristian: yes, right. conversations are stored in the linked list; sorry, it was my mistake saying frames.
Then you probably also didn't mean to say "frames" in "slow loading/processing
of conversations with over 500k frames." If you truly have over 500k UDP or
TCP packets going between {host1,port1} and {host2,port2}, that should result
in one conversation, and if that's the only conversation, the linked lists
should be very short and not see this problem. If you have a *lot* of
conversations between {host1,port1} and {host2,port2}, then the linked lists
will be longer, and you'll see this problem.
> it is also interesting the way you describe these conversations:
>
> "a TCP connection opens
> between the endpoints, some traffic is exchanged, the connection closes,
> another TCP connection opens between them, etc.."
>
> that is short-lived, non-persistent (most likely http) tcp connections.
No, it is not. It is *all* TCP connections. "Some traffic" does not specify
how much traffic that is; it could be terabytes worth of data or more, and it
could be a TCP connection that lasts for 30 years, gets shut down for a minute,
and then is followed by another 30-year connection.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
