This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Opening capture files takes an exceedingly long time

0

Good morning. We've recently built a new server [Xeon E5-2440 hexcore+HT, 32 GB memory, 2 RAID arrays] running Windows 2012 and installed Wireshark [x64]. We've found, however, that opening .pcap files on this server is taking much longer than anticipated: over 20 minutes for a 188 MB .pcap file. Whereas on a comparatively shabby PC [Intel Q9550, 6 GB memory], the file opens in 2 minutes.

Can anyone think of reasons why capture-file loading would take so much longer on the server?

Thank you.

asked 30 May '14, 06:14

MHPark's gravatar image

MHPark
11112
accept rate: 0%


One Answer:

0

Can anyone think of reasons why capture-file loading would take so much longer on the server?

DNS resolution!

Please disable the following option and then try again:

Edit -> Preferences -> Name Resolution -> Resolve Network (IP) addresses

Regards
Kurt

answered 30 May '14, 07:19

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%