7.3. Show Packet Bytes

If a selected packet field does not show all the bytes (i.e. they are truncated when displayed) or if they are shown as bytes rather than string or if they require more formatting because they contain an image or HTML then this dialog can be used.

This dialog can also be used to decode field bytes from base64, zlib compressed or quoted-printable and show the decoded bytes as configurable output. It’s also possible to select a subset of bytes setting the start byte and end byte.

You can choose from the following actions:

Help
Show this help.
Print
Print the bytes in the currently selected format.
Copy
Copy the bytes to the clipboard in the currently selected format.
Save As
Save the bytes in the currently selected format.
Close
Close this dialog box.

You can choose to decode the data from one of the following formats:

None
This is the default which does not decode anything.
Base64
This will decode from Base64.
Compressed
This will decompress the buffer using zlib.
Quoted-Printable
This will decode from a Quoted-Printable string.
ROT-13
This will decode ROT-13 encoded text.

You can choose to view the data in one of the following formats:

ASCII
In this view you see the bytes as ASCII. All control characters and non-ASCII bytes are replaced by dot.
ASCII & Control
In this view all control characters are shown using a UTF-8 symbol and all non-ASCII bytes are replaced by dot.
C Array
This allows you to import the field data into your own C program.
EBCDIC
For the big-iron freaks out there.
Hex Dump
This allows you to see all the data. This will require a lot of screen space and is best used with binary protocols.
HTML
This allows you to see all the data formatted as a HTML document. The HTML supported is what’s supported by the Qt QTextEdit class.
Image
This will try to convert the bytes into an image. Most popular formats are supported including PNG, JPEG, GIF, and BMP.
ISO 8859-1
In this view you see the bytes as ISO 8859-1.
Raw
This allows you to load the unaltered stream data into a different program for further examination. The display will show HEX data, but “Save As” will result in a binary file.
UTF-8
In this view you see the bytes as UTF-8.
UTF-16
In this view you see the bytes as UTF-16.
YAML
This will show the bytes as a YAML binary dump.

You can search for text by entering it in the “Find” entry box and pressing Find Next.