I look at large number of short lived conversations in Wireshark. The conversations view makes is how I look for failed or long running connections that exceed SLA. 4.0.x is much slower to populate the conversation view than previous versions on the Mac OS. My environment is spine leaf so VXLAN headers also add the UPD conversations making the issues worse. I have all name lookups and color rules disabled to speed up opening traces.
Any suggestions on how to speed up conversation view