Hi, On Fri, May 21, 2010 at 10:52:50PM +0300, Kaul wrote: > I've just looked at packet_info structure (epan/packet_info.h) and it's huge > - everybody keeps something there. > 1. I wonder how many times its allocated/de-allocated in a capture - > reducing its size (and perhaps creating a pool of pinfo's) might help in > performance.
> I suspect we have 1 per packet, right? For big captures, it > would cost in a lot of memory allocations. I think you mistook packet_info struct, with frame_data one. If we speaking about packet_info, it's usually allocated on stack, very rarely on heap (greping after epan_dissect_new give me one hit) Cheers. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe