I want to go deep to GRE/PPP packets. The PPP Compressed data by MPPC (Microsoft Point-to-Point Compression) which is one of three compress methods under CiscoIOS. The problem is Wireshark just stop at decoding the PPP packets not go any further to decompress the payload of them. Any one who know some kind of plug-in for Wireshark to do such thing??? Pls, help. I know that MPPC based on Lempel-Ziv algorithm. I have some C-code to compress and decompress as well. I don't know how to integrate them into Wireshark. asked 04 Jun '12, 17:52  tdhung |
One Answer:
I would suggest that you file an enhancement bug report for this. Feel free to include your C-code that performs the compression/decompression, but be sure to include a GPLv2 or compatible license with it if you want to share it with the project. I haven't looked too deeply into Wireshark's support for the various compression/decompression routines; perhaps there are already routines available, but it certainly wouldn't hurt if you share what you've got. Also, please attach a sample capture file to the bug report so that the compression/decompression can be effectively tested. answered 04 Jun '12, 18:02  cmaynard ♦♦ |
