It is HTTP and I've tried with two versions of Ethereal: 0.10.7 and
0.10.6. When I view a TCP stream I can see in the HTTP headers that
it's gzip-encoded HTML and I do see the bytestream below the headers.
I'm using Windows XP SP1 and I've even booted into Knoppix 3.2 (which
has Ethereal included, version 0.9.something). When I open the same
capture file from there it still won't decode. This thread:
http://www.ethereal.com/lists/ethereal-dev/200311/msg00244.html
shows how one person got it to work, but I was unable to rebuild
zlib.dll using his version of the makefile. I did rebuild it myself
but as I mentioned, but it would not work.
Any ideas? Can anyone else view gzip-encoded text or html from a capture?
On Wed, 27 Oct 2004 13:56:07 -0700, Jerry Talkington
<jtalkington@xxxxxxxxxxxxxxxxxxxxx> wrote:
> On Wed, Oct 27, 2004 at 11:56:59AM -0600, Nate Howe wrote:
>
>
> > Hello,
> >
> > No matter what I do I can't get GZIP content decoding to work on
> > captures. I have tried many things, including rebuilding zlib.dll and
> > replacing zlib1.dll with it (which usually causes a crash in
> > wiretap-0.1.dll). Any suggestions would be greatly appreciated.
>
> What protocol is this (I'm assuming HTTP, but you never know...)
>
> Also, what does it do instead of decoding the gzip content (i.e. does it
> just display as bytes, or is there something declaring it as gzip in the
> details pane?) What version are you using?
>
> --
> GPG public key:
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>