Re: tshark memory

[Guy Harris <guy () alum mit edu>]

On Jan 19, 2010, at 12:57 PM, Abhijit Bare wrote:

> After 2 hours, my tshark process is using 3.6G RESIDENT memory and ~ 500G VIRT memory in top output.

To quote my reply:

> When it reassembles fragmented/segmented/etc. packets, however, the content of the reassembled packets *is* kept in 
> memory.

Other data structures that maintain state are also kept in memory.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe