Ethereal-dev: Re: [Ethereal-dev] eMule compressed protocol?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 1 Nov 2005 11:11:29 -0800
On Tue, Nov 01, 2005 at 04:57:25PM +0000, Mort wrote:
> 
> I've been looking at eDonkey traffic and was wondering if anyone has
> created a update to the eDonkey dissector to handle the eMule compressed
> packets (0xD4)?
> 
> Ethereal does identify them but doesn't make any attempt to decompress
> them. 
> 
> >From looking at the various edonkey clients it seems to be just compressed
> with zlib.
> 
> If anyone has done any work with this I'd really appreciate the info. If
> not I might have to starting learning about writing dissectors.. and it's
> been a while since I've coded any C!

There's already a tvb_uncompress() function that should take of
decompression, it just needs to be called from the eDonkey dissector.
For reference, it's used in packet-http.c and packet-slsk.c.

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762