#wireshark

Articles tagged with #wireshark

Concurrency Without a Parallel Parser: Splitting PCAPs by Session
tshark needs linear state, so I moved the concurrency upstream — and hit a corrupted-output problem on the way.
Aug 26, 20265 min read158
The 2.5 GB Wall: Why My tshark Wrapper Died, and How Streaming Fixed It
Three queries, a single-threaded tool, and a file too big for memory.
Aug 10, 20264 min read391