Wireshark-dev: Re: [Wireshark-dev] Decompress Data

From: Marcel Haas <inf462@xxxxxxxxxxx>
Date: Mon, 10 Oct 2011 10:24:22 +0200
On Fri, 7 Oct 2011 09:34:53 -0600, Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> wrote:
On Fri, Oct 07, 2011 at 11:31:24AM +0200, Marcel Haas wrote:

 I have some packets witch are compress witz zlib.
 I want to uncompress them.

Take a look at the tvb_uncompress() or tvb_child_uncompress() functions in epan/tvbuff.c. An example of tvb_child_uncompress() is in the HTTP
dissector, epan/dissectors/packet-http.c.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
 hmm okay it seems to do the right way if i make it like that

                next_tvb =tvb_new_subset(tvb,offset2,-1,-1);
compress_tvb=tvb_uncompress(next_tvb,0,tvb_length(next_tvb)); add_new_data_source(pinfo,compress_tvb,"Decompressed TVB");