7.3. Show Packet Bytes

If a selected packet field does not show all the bytes (i.e. they are truncated when displayed) or if they are shown as bytes rather than string or if they require more formatting because they contain an image or HTML then this dialog can be used.

This dialog can also be used to decode field bytes from base64, zlib compressed or quoted-printable and show the decoded bytes as configurable output. It’s also possible to select a subset of bytes setting the start byte and end byte.

You can choose from the following actions:

  1. Find: Search for the given text. Matching text will be highlighted, and the “Find Next” will search for more. In the context menu for the find text it’s possible to configure to use regular expression find.
  2. Print: Print the bytes in the currently selected format.
  3. Copy: Copy the bytes to the clipboard in the currently selected format.
  4. Save As: Save the bytes in the currently selected format.
  5. Close: Close this dialog box.

7.3.1. Decode as

You can choose to decode the data from one of the following formats:

  1. None: This is the default which does not decode anything.
  2. Base64: This will decode from Base64.
  3. Compressed: This will decompress the buffer using zlib.
  4. Quoted-Printable: This will decode from a Quoted-Printable string.

7.3.2. Show as

You can choose to view the data in one of the following formats:

ASCII

In this view you see the bytes as ASCII. All control characters and non-ASCII bytes are replaced by dot.

ASCII & Control

In this view all control characters are shown using a UTF-8 symbol and all non-ASCII bytes are replaced by dot.

C Array

This allows you to import the field data into your own C program.

EBCDIC

For the big-iron freaks out there.

HEX Dump

This allows you to see all the data. This will require a lot of screen space and is best used with binary protocols.

HTML

This allows you to see all the data formatted as a HTML document. The HTML supported is what’s supported by the Qt QTextEdit class.

Image

This will try to convert the bytes into an image. Images supported are what’s supported by the Qt QImage class.

ISO 8859-1

In this view you see the bytes as ISO 8859-1.

Raw

This allows you to load the unaltered stream data into a different program for further examination. The display will show HEX data, but “Save As” will result in a binary file.

UTF8

In this view you see the bytes as UTF-8.

YAML

This will show the bytes as a YAML binary dump.