Module cache

Module cache 

Source
Expand description

Parse cache for avoiding redundant protocol parsing.

In streaming mode with JOINs, multiple protocol readers traverse the same PCAP file. Without caching, each reader parses every packet independently, even though the parse result is the same.

The cache stores parsed protocol data keyed by frame number, allowing subsequent readers to reuse previous parse results.

Structs§

CacheStats
Cache statistics for monitoring.
CachedParse
Cached parse result for a single packet.
LruParseCache
LRU parse cache with configurable size limit.
NoCache
No-op cache implementation for when caching is disabled.
OwnedParseResult
Owned parse result for a single protocol layer.

Traits§

ParseCache
Cache for parsed packet data.