Ethereal-users: Re: [Ethereal-users] Decompressing gzip Content-Encoded data

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 16 Aug 2004 13:20:09 -0700
On Mon, Aug 16, 2004 at 04:01:32PM -0400, Dave Humes wrote:
> I"m having some difficulty using Ethereal to decompress gzip compressed http data.  I have both Uncompress entity bodies and Reassemble chunked transfer-encoded bodies checked for the HTTP preferences.  But if I follow a tcp stream with gzip encoded data, it displays the compressed data.  Does Ethereal only do the decompression when it's capturing data?  If so, that would be a real limitation.  I hope I'm missing something obvious.  I'm using version 0.10.6 for Windows.

Follow TCP Stream will show the compressed data, there's no option to
turn on decompression for that.  However, you can click on the
uncompressed data in the details frame of the frame that the stream was
reassembled in (i.e. click on any of the frames in the stream that say
"Desegmented TCP", and expand the bottom tree, then double click the
"[Reassembled PDU in frame: XX]" link, and it should jump you to the
frame that contains the decompressed data.)

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762