Search in 'Uncompressed entity body'
Hi,
I have a packet exchange where the remote sends gzip-compressed data. I am trying to search the data for specific strings, and 'Find/String/Packet bytes' does not work. In display filter I am using a filter like http and data-text-lines contains "table_name", and it doesn't find anything.
I have attached an image with one of the packets shown containing "table_name" in the uncompressed entity body, and another image showing the filter and results (none). Is this the correct way to find data in the uncompressed part, or should I try something else?
Apparently I don't have enough points to upload an image.
Thanks in advance for your time.
Greg