[Marcel Haas <inf462@xxxxxxxxxxx>]

On Fri, 7 Oct 2011 09:34:53 -0600, Stephen Fisher 
<steve@xxxxxxxxxxxxxxxxxx> wrote:
> On Fri, Oct 07, 2011 at 11:31:24AM +0200, Marcel Haas wrote:
>
> >  I have some packets witch are compress witz zlib.
> >  I want to uncompress them.
>
> Take a look at the tvb_uncompress() or tvb_child_uncompress() 
> functions
> in epan/tvbuff.c.  An example of tvb_child_uncompress() is in the 
> HTTP
> dissector, epan/dissectors/packet-http.c.
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe

Iam using the tvb_umcompress function now.

Code:
if(compress==67){
    offset2=loh+20;
    compress_tvb=tvb_uncompress(tvb,offset2,tvb_length(tvb));
    add_new_data_source(pinfo,compress_tvb,"Decompressed TVB");
}

But it didnt work ..i get a failer when i get a uncompress packet.

[Malformed Packet:NOS]
   [Expert Info (Error/Malformed):Malformed Packet (Exception 
occurred)]

I guess that means i cant uncompress my packet with that function ?