Wireshark-dev: Re: [Wireshark-dev] Create User Friendly Hex Dump for Compression Algorithms
Padilla, Alex D wrote:
Does anyone know how I can create a more user friendly hex dump display
for compression algorithms?
The hex dump field is intended to be a raw hex dump; that's as
user-friendly as it's designed and intended to be.
I would like to separate the hex dump when
capturing packets into sections that contain information on compression
algorithms, whether the dump is chunked or not, and a variety of other
things.
Presumably there are some fields in the packet that indicate what
compression algorithm was used and so on, and presumably you're already
dissecting those fields and showing them in the packet detail pane. If
not, that's the way you should convey that information.
If that information is part of the compressed blob itself, then you
should show the raw contents of the compressed blob in a structured
fashion in the second pane (e.g., showing whatever fields indicate the
compression algorithm, etc.), and then decompress it and dissect that
separately.