I want to go deep to GRE/PPP packets. The PPP Compressed data by MPPC (Microsoft Point-to-Point Compression) which is one of three compress methods under CiscoIOS. The problem is Wireshark just stop at decoding the PPP packets not go any further to decompress the payload of them. Any one who know some kind of plug-in for Wireshark to do such thing??? Pls, help.

I know that MPPC based on Lempel-Ziv algorithm. I have some C-code to compress and decompress as well. I don't know how to integrate them into Wireshark.

asked 04 Jun '12, 17:52

tdhung's gravatar image

tdhung
1111
accept rate: 0%


I would suggest that you file an enhancement bug report for this. Feel free to include your C-code that performs the compression/decompression, but be sure to include a GPLv2 or compatible license with it if you want to share it with the project. I haven't looked too deeply into Wireshark's support for the various compression/decompression routines; perhaps there are already routines available, but it certainly wouldn't hurt if you share what you've got.

Also, please attach a sample capture file to the bug report so that the compression/decompression can be effectively tested.

link

answered 04 Jun '12, 18:02

cmaynard's gravatar image

cmaynard ♦
3.2k51656
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×2
×1

Asked: 04 Jun '12, 17:52

Seen: 452 times

Last updated: 04 Jun '12, 18:02

powered by OSQA