I am looking to find out if Wireshark can decode the Body of a SIP Notify when the body is gzipped by the sender. I can see the SIP header, but just not the body.
asked 05 Mar '12, 17:37
The HTTP dissector includes code to handle gzipped content encodings of the body, but not gzipped transfer encodings.
The SIP dissector doesn't include code for either of those, so it can't decode gzipped SIP bodies.
If you want support for that in SIP, file an enhancement request at the Wireshark Bugzilla.
answered 05 Mar '12, 20:02
Guy Harris ♦♦