Home page logo
/

wireshark logo Wireshark mailing list archives

Re: wireshark not deflating ipcomp packets
From: Martin Visser <martinvisser99 () gmail com>
Date: Tue, 23 Apr 2013 11:15:15 +1000

There is answer in a thread from a few years ago here -
http://www.wireshark.org/lists/wireshark-bugs/201011/msg00779.html - it may
or may not help.

Also you are using a *very* old version of Wireshark, that often creates a
whole lot of issues.


Regards, Martin

MartinVisser99 () gmail com


On 23 April 2013 02:12, Rupa P V <rupapv () gmail com> wrote:

Hi,

I am trying to ping between two machines with large ICMP packets which are
compressed using DEFLATE. I would prefer to view the decompressed packets
in the expanded packet details, but seems like wireshark is not
decompressing them.  It identifies the packet having IPComp CPI equal to
 DEFLATE , but is not actually deflating the data that follows.

I am using only IPComp, no encryption or authentication in the packet.  I
am using version 1.2.7 of wireshark

Please let me know if anybody knows how to see them decompressed.

-rupapv

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]