Wireshark-users: [Wireshark-users] Problem with decoding TCP payload
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Pierluigi Felici <pierluigicdc@xxxxxxxx>
Date: Tue, 18 Dec 2007 09:25:24 +0100 (CET)
Hi to everybody,
 
I've a problem regarding an HTTP response content of a HTTP request.
 
The request made by the clietn is:
 
Accept: text/_javascript_, text/ecmascript, application/x-_javascript_, */*
Accept-Charset: iso-8859-1, utf-8, iso-10646-ucs-2; q=0.6
Accept-Encoding: gzip,deflate,identity;q=0.9
Accept-Language: it
User-Agent: NokiaN70-1/5.0638.3.0.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1
 
The response is:
 
HTTP/1.1 200 OK
Content-Type: image/jpeg
Cache-control: private
Date: Fri, 14 Dec 2007 10:32:59 GMT
Server: GFE/1.3
Content-Length: 4992
Content-Encoding: deflate
Warning: 214  MSP-PROXY TransformationApplied
 
As i can see in the the header response is that the content-encoding is deflate. I've tried to decode the payload of the response with deflate algorithm (zlib) but it fails.
 
I think that the response body is not compressed by deflate algorithm.
 
I saw that wireshark has decoded the response payload, so my questions are:
- wich algorithm is used by wireshark to decode this kind of data?
- what does "Warning: 214  MSP-PROXY TransformationApplied" means, it has some effects on the response payload?
 
Thanks.
 
 
 
 
 

L'email della prossima generazione? Puoi averla con la nuova Yahoo! Mail