Ask Your Question

Revision history [back]

Search in 'Uncompressed entity body'

Hi, I have a packet exchange where the remote sends gzip-compressed data. I am trying to search the data for specific strings, and 'Find/String/Packet bytes' does not work. In display filter I am using a filter like http and data-text-lines contains "table_name", and it doesn't find anything. I have attached an image with one of the packets shown containing "table_name" in the uncompressed entity body, and another image showing the filter and results (none). Is this the correct way to find data in the uncompressed part, or should I try something else? Apparently I don't have enough points to upload an image. Thanks in advance for your time. Greg

Search in 'Uncompressed entity body'

Hi, I have a packet exchange where the remote sends gzip-compressed data. I am trying to search the data for specific strings, and 'Find/String/Packet bytes' does not work. In display filter I am using a filter like http and data-text-lines contains "table_name", and it doesn't find anything. anything.
I have attached an image with one of the packets shown containing "table_name" in the uncompressed entity body, and another image showing the filter and results (none). Is this the correct way to find data in the uncompressed part, or should I try something else? Apparently I don't have enough points to upload an image.
Thanks in advance for your time.
Greg