Wireshark · Wireshark-dev: Re: [Wireshark-dev] Create User Friendly Hex Dump for Compression Algorithms

[Guy Harris <guy@xxxxxxxxxxxx>]

Padilla, Alex D wrote:
> Does anyone know how I can create a more user friendly hex dump display 
> for compression algorithms?

The hex dump field is intended to be a raw hex dump; that's as 
user-friendly as it's designed and intended to be.

> I would like to separate the hex dump when 
> capturing packets into sections that contain information on compression 
> algorithms, whether the dump is chunked or not, and a variety of other 
> things.

Presumably there are some fields in the packet that indicate what 
compression algorithm was used and so on, and presumably you're already 
dissecting those fields and showing them in the packet detail pane.  If 
not, that's the way you should convey that information.

If that information is part of the compressed blob itself, then you 
should show the raw contents of the compressed blob in a structured 
fashion in the second pane (e.g., showing whatever fields indicate the 
compression algorithm, etc.), and then decompress it and dissect that 
separately.