Wireshark-dev: Re: [Wireshark-dev] Decompress Data
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Marcel Haas <inf462@xxxxxxxxxxx>
Date: Mon, 10 Oct 2011 10:08:12 +0200
On Fri, 7 Oct 2011 09:34:53 -0600, Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> wrote: 
On Fri, Oct 07, 2011 at 11:31:24AM +0200, Marcel Haas wrote:


 I have some packets witch are compress witz zlib.
 I want to uncompress them.
Take a look at the tvb_uncompress() or tvb_child_uncompress() functions in epan/tvbuff.c. An example of tvb_child_uncompress() is in the HTTP 
dissector, epan/dissectors/packet-http.c.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe 

Iam using the tvb_umcompress function now.

Code:
if(compress==67){
    offset2=loh+20;
    compress_tvb=tvb_uncompress(tvb,offset2,tvb_length(tvb));
    add_new_data_source(pinfo,compress_tvb,"Decompressed TVB");
}

But it didnt work ..i get a failer when i get a uncompress packet.

[Malformed Packet:NOS]
[Expert Info (Error/Malformed):Malformed Packet (Exception occurred)] 

I guess that means i cant uncompress my packet with that function ?