Ethereal-users: Re: [Ethereal-users] capture HTTP and gzip content-encoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 14 Jul 2004 11:25:49 -0700
On Wed, Jul 14, 2004 at 02:28:43PM +0200, Tomasz Chmielewski wrote:
> Hello,
> 
> I've been trying to capture packets from HTTP servers, which accept gzip 
> content-encoding.
> 
> However, when I capture these packets, they are NOT compress in Ethereal.
> Server's log show that the files sent were gzipped though, and logs even 
> show the ratio.
> 
> So what am I missing?
> 
> Is ethereal decompressing this gzipped content, or do I have to look for 
> an error somewhere else (where?)?

If you've enabled decompression of HTTP data, then yes, it will
gunzip/deflate them.  It should be pretty clear that the original
packets were compressed, by looking at the packet details frame.

If you haven't enabled/disabled decompression of HTTP data, then the
server logs are incorrect, and the packets aren't being gzipped.

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762