First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Very slow performance on MacBook Pro OS X 12.5.1

For some reason wireshark is running extremely slow on my MBP and I can’t quite figure out why. It ran fine for a few months, and this is only recent. I tried the usual uninstall reinstall but no joy there. It’s just extremely slow when navigating around and typing into filters, but then once you filter a PCAP down it runs better. Any ideas? I uninstalled and reinstalled the ARM version just to be sure I got the right processor version.

lonememe's avatar
1
lonememe
asked 2022-08-31 16:05:09 +0000
edit flag offensive 0 remove flag close merge delete

Comments

How big are your pcap files ..? Are you using Chrome browser btw. If so try closing it down.

ajaznawaz's avatar ajaznawaz (2022-08-31 17:28:00 +0000) edit

So they're in the 400k packets kinda area, but this is a recent development and WS used to run big files without any issues at all. It'll run small sample files just fine, but it used to also do that with big files. And no, I haven't noticed a difference when chrome is or isn't running.

lonememe's avatar lonememe (2022-08-31 17:57:55 +0000) edit

How does Wireshark look in Activity Monitor ...?

ajaznawaz's avatar ajaznawaz (2022-09-01 08:44:07 +0000) edit
add a comment see more comments

1 Answer

0

It is probably a combination of settings in your "configuration profile". Are you working under a custom profile or did you stick to the "Default" profile?

Quickest test (with temporarily losing all your changed settings) is to close all Wireshark instances and then rename the folder <HOMEDIR>/.config/wireshark to <HOMEDIR>/.config/wireshark.BAK (in a terminal window). Then open WIreshark and see if the problem is still there? If not, it was something in your settings (and specifically in the "Configuration Profile" that was active).

Can you first check this? Then we'll take it from there :-)

SYN-bit's avatar
18.5k
SYN-bit
answered 2022-09-01 11:23:48 +0000
edit flag offensive 0 remove flag delete link

Comments

I appreciate the suggestion! I just changed the folder as you suggested to .BAK and opened it up, but it's still running slowly with normal kind of sized pcaps.

What do you suggest next? Thanks!

lonememe's avatar lonememe (2022-09-06 21:48:24 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer