Tshark slow output
Hey there!
I am trying to use tshark for printing UDP data and I noticed a delay of 0.6 seconds between the frame info time epoch and the actual writing to stdout.
I am using UBUNTU 22.04 with 11th Gen Intel(R) Core(TM) i7-11700 @ 2.50GHz and 16GB RAM in performance mode, so it is quite strange.
The command I am running is /usr/bin/tshark -l -n -x -i lo -f "udp port 7777"
.
Is there any way to make the output faster?
Normally its the case that the buffer size is increased (-B|--buffer-size <capture buffer="" size="">) because packets are being dropped.
If the packet rate is low, perhaps decreasing the buffer will reduce the latency.
tcpdump has the
--immediate-mode
option but there is no such option fordumpcap
(ortshark
).Unfortunately, tcpdump doesn't have -T json
Did you try a smaller buffer with
tshark
?I tried, the minimum buffer configurable is 1MiB as long as I understand