Ask Your Question
0

Pcap files are opening very slow [closed]

asked 2019-08-29 14:56:11 +0000

Hello, Even small trace (300kB) is loading 3 minutes. Reinstall of wireshark and ncap did not fix the issue. i have windows 7 x64 Wireshark Version 3.0.3 (v3.0.3-0-g6130b92b0ec6)

What could be the cause of the issue? Thanks

Best regards Ladislav Karlovsky

edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by Ladislav
close date 2019-08-30 07:50:18.086602

Comments

The traffic in the capture can affect the processing required when loading. Can you share the capture, as otherwise it's difficult to comment?

grahamb gravatar imagegrahamb ( 2019-08-29 15:01:00 +0000 )edit

Yes sure, here it is: https://www.dropbox.com/s/63m5m5lbccw...

but it is not only this trace - this behavior occuring with each trace that i am trying to open. Thank you for the reply

Ladislav gravatar imageLadislav ( 2019-08-29 15:05:20 +0000 )edit

Loads almost instantly for me (Win 10, quite a powerful machine).

I wonder if it's due to something in your profile, or name resolution? Can you try disabling name resolution (View -> Name Resolution), and create a new profile (Edit -> Configuration Profiles...)?

grahamb gravatar imagegrahamb ( 2019-08-29 15:39:34 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-08-29 17:24:34 +0000

Pascal Quantin gravatar image

This behavior is often seen when you have a big (Pre)-Master-Secret log file (in TLS/SSL preferences) and you have TLS/SSL traffic (as in your capture). Could you double check this and clear the file?

edit flag offensive delete link more

Comments

Hello, yes thanks a lot. I have totally forgot that i am capturing this info about pre master to log file which had like 100 MB. It is fixed now. Thanks a lot! :)

Ladislav gravatar imageLadislav ( 2019-08-30 07:49:54 +0000 )edit

Question Tools

Stats

Asked: 2019-08-29 14:56:11 +0000

Seen: 69 times

Last updated: Aug 29