[Wireshark-dev] Proposal to improve filtration speed by caching fields that are queried recently

2020-06-14 Thread Sidhant Bansal
Hi all, I want to propose an improvement to speed up the display filters by avoiding to re-dissect all the packets again and again when not required and instead maintaining a cache of the fields that have been queried recently. Motivation: Benchmarking filtering on capture files > 100 MB shows th

[Wireshark-dev] Incomplete Filtering optimisation technique

2020-06-03 Thread Sidhant Bansal
There is this old thread discussing a filtering optimisation here( https://www.wireshark.org/lists/wireshark-dev/200903/msg00182.html) and here(https://wiki.wireshark.org/Development/FastFiltering) I am facing speed bottleneck when dealing with large capture files (> 100 MB) and running filter on