Wireshark · Wireshark-users: [Wireshark-users] Decoding / Displaying Large Capture Files

["Barry Constantine" <Barry.Constantine@xxxxxxxx>]

Hello,

 

I am aware that one can use editcap to split large files into smaller capture files to improve Wireshark decode / display performance.

 

Is there any way to optimize Wireshark when to read in large files without splitting first?  Some commercial protocol analyzers read in the first so many packets, display them, while the rest are being read in.

 

Thanks,

Barry