ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: [Ethereal-users] Re: gzip decode inside HTTP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Dave Moore <davem@xxxxxxxxx>
Date: Wed, 04 Jan 2006 15:27:53 -0500
I just re-tested this with the latest ethereal-10.14 with both a Windows Binary install and FC4 source compile.

Same problem, gzip inside HTTP does not decode.

Use Ethereal to capture traffic from "www.yahoo.com"

Then "follow" the first port 80 connection:

-----------------------------------------------

Host: www.yahoo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Accept: application/x-shockwave-flash,text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: FPB=551u865dl11ro3c4; D=_ylh=X3oDMTFmODljcHFqBF9TAzI3MTYxNDkEcGlkAzExMzYzOTY5OTAEdGVzdAMwBHRtcGwDaW5kZXgtY3Nz; B=a7i4uvt1ro3c4&b=2

HTTP/1.1 200 OK
Date: Wed, 04 Jan 2006 19:25:36 GMT
P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml";, CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV" Set-Cookie: D=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; domain=.yahoo.com
Cache-Control: private
Vary: User-Agent
Set-Cookie: D=_ylh=X3oDMTFmMWZna2o1BF9TAzI3MTYxNDkEcGlkAzExMzY0MDE5NzAEdGVzdAMwBHRtcGwDaW5kZXgtY3Nz; path=/; domain=.yahoo.com
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html
Content-Encoding: gzip

35b5
............{s...8....;L..1.F....@
.....O.l6{[email protected].`..................c,.....o.3.|~......1ysy....<x{zHj.V..r.j.].%.mA..e....;...........i....S[...y.I.f.i..
[email protected]..."3tf1qu.2.'...........B......H...X..{...
~..C..