Hi all,
I want to propose an improvement to speed up the display filters by
avoiding to re-dissect all the packets again and again when not required
and instead maintaining a cache of the fields that have been queried
recently.
Motivation: Benchmarking filtering on capture files > 100 MB shows th
There is this old thread discussing a filtering optimisation here(
https://www.wireshark.org/lists/wireshark-dev/200903/msg00182.html) and
here(https://wiki.wireshark.org/Development/FastFiltering)
I am facing speed bottleneck when dealing with large capture files (> 100
MB) and running filter on