ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Decompress problem if data is over multiple frame

From: Hardik Patel <hardik.party@xxxxxxxxx>
Date: Thu, 15 Aug 2013 15:57:07 +0200
Hello,


I am creating dissector plugin. Trace which i have capture is compressed by zlib.

I have two option
1)write own decompress function using zlib
2) to use tvb_uncompress() function of wireshark

Both have issue if compress packet is over multiple frame.

wireshark tvb_uncompress() function work only from frame which have zlib header which is obvious case.

is there any particular method to save all these bytes in buffers till i got complete data so i can start decompressor.

Thank you very much !!!

Regards,
Hardik Patel