Wireshark · Wireshark-dev: [Wireshark-dev] Decompress problem if data is over multiple frame

[Hardik Patel <hardik.party@xxxxxxxxx>]

Hello,

I am creating dissector plugin. Trace which i have capture is compressed by zlib.

I have two option

1)write own decompress function using zlib

2) to use tvb_uncompress() function of wireshark

Both have issue if compress packet is over multiple frame.

wireshark tvb_uncompress() function work only from frame which have zlib header which is obvious case.

is there any particular method to save all these bytes in buffers till i got complete data so i can start decompressor.

Thank you very much !!!

Regards,
Hardik Patel